search for: wanacry

...The cure was to add to smb.conf > > ; To operate with XP, add the following to the [global] section: > ; lanman auth = yes > ; ntlm auth = yes > lanman auth = yes > ntlm auth = yes > > Sorry, but you seem to have fixed the wrong thing ;-) Did you miss 'Wanacry' ??? Do not make Samba use ntlm, make XP (if you must use XP) use NTLMv2, see here: http://www.imss.caltech.edu/node/396 Rowland

...following to the [global] section: >>> ; lanman auth = yes >>> ; ntlm auth = yes >>> lanman auth = yes >>> ntlm auth = yes >>> >>> >> >> Sorry, but you seem to have fixed the wrong thing ;-) >> Did you miss 'Wanacry' ??? >> >> Do not make Samba use ntlm, make XP (if you must use XP) use NTLMv2, >> see here: >> >> http://www.imss.caltech.edu/node/396 >> >> Rowland >> >> > > Did not M$ issue a patch for wanacry and xp? https://krebsonsecurity.com/...

...ast prove that the server is correct and XP is the problem. If this is a "classic" domain controller then you DO have to use NTLM (but definately NOT lanman.)      If XP supports NTLMv2 then I think it will negotiate that with Samba.     I think Microsoft released patches for XP for WanaCry, even tho XP is otherwise unsupported.  So some of the security concerns are partially mitigated.     Although you should make sure that the  antivirus is enabled  and that the machine is ONLY used for the absolutely essential functions (no web browsing, no e-mail.) Some of the default "si...

As you may remember I went through a classic-upgrade a few months ago. I have a second domain to migrate and I am again/still scared to attack that ;-) As I prepare my test VM and try to remember all those details the customer has purchase 2 new Windows 10 PCs and I was asked to take them into production. Is there a way to join them to the existing NT4-based Samba-domain or not? I find various

...hanging the entire login and > mapping system. > I am very grateful to everyone who responded and helped me in this decision > making. > I wish everyone health. I cannot help but think that was a BAD decision, Samba 3.6.6 is totally unsupported and is very insecure, ever heard of 'wanacry' ? If you must use it, then can I urge you to not connect your network to the internet in any way. I cannot stop you using 3.6.6, it is your network and you control it, but you also get to pick up the pieces when it goes wrong. One last thought, do the people who run your AD know you are d...

...support, you may also > find that a subsequent Windows update stops it working again. > > I really think that it is time that anybody still running an NT4-style > domain starts making plans to upgrade to AD. I am on my way, sure! > Just look what has happened over the weekend with wanacry and XP. > Support for XP & Vista has ended, 7 is in extended support, you really > need to be running supported systems. Yes, I agree. Just wanted to take out the pressure a bit. I now prepare the classic-upgrade within a test VM

Dear list, Help! I just upgrade a samba server. Server: Fedora 26 samba-4.6.8-0.fc26.x86_64 Workstations (5 of them): XP Pro SP3 The old server was set up as a Domain controller. I copied the smb.conf over to the new server. The XP workstations can see and mount everything. On the workstations, I removed myself from the old domain and rebooted, powered off the old server,

...s lack of Microsoft support, you may also > find that a subsequent Windows update stops it working again. > > I really think that it is time that anybody still running an NT4-style > domain starts making plans to upgrade to AD. > > Just look what has happened over the weekend with wanacry and XP. > Support for XP & Vista has ended, 7 is in extended support, you really > need to be running supported systems. > > Rowland > > > Windows 7 may not be able to join to a true NT4 domain. However you can (at least you good) set up a Samba BDC in an NT4 domain a...

...gistry and erasing the >> TEMP director from Doc and Setting and rebooting does not help. >> >> What am I doing wrong? >> > > Quite a few things ;-) > > I understand that you have to use XP, but you don't have to use NTLM, > haven't you heard of 'wanacry' ? > Go here and read it: http://www.imss.caltech.edu/node/396 > > Then you can remove these lines: > > lanman auth = yes > ntlm auth = yes > > Why have you got these lines ? it isn't an AD DC > > dns forwarder = 192.168.255.12 > allo...

...m very grateful to everyone who responded and helped me in this > > decision > > > making. > > > I wish everyone health. > > > > I cannot help but think that was a BAD decision, Samba 3.6.6 is totally > > unsupported and is very insecure, ever heard of 'wanacry' ? > > > > If you must use it, then can I urge you to not connect your network to > > the internet in any way. > > > > I cannot stop you using 3.6.6, it is your network and you control it, > > but you also get to pick up the pieces when it goes wrong. > &g...

...ou may find a way around this lack of Microsoft support, you may also find that a subsequent Windows update stops it working again. I really think that it is time that anybody still running an NT4-style domain starts making plans to upgrade to AD. Just look what has happened over the weekend with wanacry and XP. Support for XP & Vista has ended, 7 is in extended support, you really need to be running supported systems. Rowland

...sequent Windows update stops it working again. > > > > I really think that it is time that anybody still running an > > NT4-style domain starts making plans to upgrade to AD. > > I am on my way, sure! Good > > > Just look what has happened over the weekend with wanacry and XP. > > Support for XP & Vista has ended, 7 is in extended support, you > > really need to be running supported systems. > > Yes, I agree. Just wanted to take out the pressure a bit. > I now prepare the classic-upgrade within a test VM > The only problem that I ca...

...t; Removing the temp profile for the registry and erasing the > TEMP director from Doc and Setting and rebooting does not help. > > What am I doing wrong? > Quite a few things ;-) I understand that you have to use XP, but you don't have to use NTLM, haven't you heard of 'wanacry' ? Go here and read it: http://www.imss.caltech.edu/node/396 Then you can remove these lines: lanman auth = yes ntlm auth = yes Why have you got these lines ? it isn't an AD DC dns forwarder = 192.168.255.12 allow dns updates = nonsecure Is 'winbind' running ? i...

...mapping system. > > I am very grateful to everyone who responded and helped me in this > decision > > making. > > I wish everyone health. > > I cannot help but think that was a BAD decision, Samba 3.6.6 is totally > unsupported and is very insecure, ever heard of 'wanacry' ? > > If you must use it, then can I urge you to not connect your network to > the internet in any way. > > I cannot stop you using 3.6.6, it is your network and you control it, > but you also get to pick up the pieces when it goes wrong. > > One last thought, do the pe...

...t and XP is > the problem. > > > If this is a "classic" domain controller then you DO have to use NTLM > (but definately NOT lanman.)      If XP supports NTLMv2 then I think it > will negotiate that with Samba.     I think Microsoft released patches > for XP for WanaCry, even tho XP is otherwise unsupported.  So some of > the security concerns are partially mitigated.     Although you should > make sure that the  antivirus is enabled  and that the machine is ONLY > used for the absolutely essential functions (no web browsing, no e-mail.) > > Som...

...one who responded and helped me in this >> > decision >> > > making. >> > > I wish everyone health. >> > >> > I cannot help but think that was a BAD decision, Samba 3.6.6 is totally >> > unsupported and is very insecure, ever heard of 'wanacry' ? >> > >> > If you must use it, then can I urge you to not connect your network to >> > the internet in any way. >> > >> > I cannot stop you using 3.6.6, it is your network and you control it, >> > but you also get to pick up the pieces whe...

On 09/30/2017 12:58 AM, Rowland Penny via samba wrote: > I understand that you have to use XP, but you don't have to use NTLM, > haven't you heard of 'wanacry' ? > Go here and read it:http://www.imss.caltech.edu/node/396 WannaCry did not infect XP or for that matter, Windows Nein, oops, Ten. Doesn't mean it couldn't if altered to do so: Reference: https://www.computerworld.com/article/3196673/malware/faq-are-you-in-danger-from-th...

I apologize for forgetting to pass on all the information. In fact, this problem is occurring because of the migration from a VM with Oracle SunOS to another VM with Oracle Linux 7. This old VM is for production and runs the CACH? database, so we decided to create a new VM and migrate everything to it. We have already migrated the database and users without problems. Only on each machine of these

Hi All, Fedora Core 26 # rpm -qa \*samba\* samba-common-4.6.7-0.fc26.noarch samba-common-libs-4.6.7-0.fc26.x86_64 samba-4.6.7-0.fc26.x86_64 samba-client-libs-4.6.7-0.fc26.x86_64 samba-winbind-modules-4.6.7-0.fc26.x86_64 samba-libs-4.6.7-0.fc26.x86_64 samba-client-4.6.7-0.fc26.x86_64 samba-common-tools-4.6.7-0.fc26.x86_64 samba-winbind-4.6.7-0.fc26.x86_64 I am replacing a CentOS 5 Samba Server