similar to: NTLM, NTLMv2, lmcompatibilitylevel >=2 doesnt work

Hi folks, I have been asked to force NTLMv2 logins to avoid use of LM hashes. To meet the requirement I added some lines to the smb.conf in [Global] (we only have that section anyway - this is purely for domain authentication with an ldap backend): client lanman auth = no client NTLMv2 auth = yes lanman auth = no min protocol = LANMAN2 ntlm auth = no This seemed to work - users

Hi: I have Samba 3.0.2a running on Fedora Core 1. This server is set to be Domain PDC and I am looking to have clients attach to it NTLMv2 only. After looking over the man page for smb.conf, I have set the two options that I thought would accomplish: [Global] lanman auth = no ntlm auth = no On the workstation side, I have set HKLM\SYSTEM\CurrentControlSet\Control\Lsa\lmcompatibilitylevel

Hello experts/users, We have a samba server in ubuntu 18.04 LTS with version. apt-cache policy samba samba: Installed: 2:4.7.6+dfsg~ubuntu-0ubuntu2.16 Candidate: 2:4.7.6+dfsg~ubuntu-0ubuntu2.16 All is fine and great. Except one (internet disabled) windows 7 professional PC (sorry we still need to run it for a scientific tool) cannot connect unless I put "ntlm auth = yes" in

Hi all, Has anyone experienced QoS over an ISDN connection? Have you found any trouble setting this ? In fact, I hasn''t to exist any trouble but not in my case. I have tried something and it seems doesn''t work every time. Besides, I need more tests. But for the moment, any experience information will be useful. Thanks all in advance. Esteve Camps

https://bugzilla.samba.org/show_bug.cgi?id=10518 Summary: rsync hangs (100% cpu) Product: rsync Version: 3.1.1 Platform: All OS/Version: Linux Status: NEW Severity: critical Priority: P5 Component: core AssignedTo: wayned at samba.org ReportedBy: syzop at vulnscan.org QAContact:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, this might seem like a classical problem but I''ve trouble getting this working correctly: # ifconfig ### output stripped down: eth0 Link encap:Ethernet HWaddr 00:50:FC:2B:EB:1B inet addr:192.168.5.220 Bcast:192.168.5.255 Mask:255.255.255.0 eth1 Link encap:Ethernet HWaddr 00:02:44:60:EC:58 inet

Hi, My Samba 4.1.x server is connected to two networks, one in the 192.168.* range (wired) and one in the 10.* range (wifi). The clients on either network normally cannot reach each other. I noticed Samba hands out (eg: for dcname.company.net) it's IP's from both ranges to clients on both sides. So the 192.168.* clients get two A records: 192.168.1.1 & 10.0.0.2. I noticed that,

I discovered the situation. When attempting to logon from Windows 2008R2 to Samba4 is made we can see in Samba smbd log the following important for understanding the situation lines: [2017/11/20 13:25:52.040094, 2, pid=7100, effective(0, 0), real(0, 0)] ../libcli/auth/ntlm_check.c:430(ntlm_password_check) ntlm_password_check: NTLMv1 passwords NOT PERMITTED for user <username> [2017/11/20

I'm trying to use Rprof() to identify bottlenecks and speed up a particullary slow section of code which reads in a portion of a tif file and compares each of the values to values of predictors used for model fitting. I've written up an example that anyone can run. Generally temp would be a section of a tif read into a data.frame and used later for other processing. The first portion

On Tue Feb 17 11:14:15 GMT 2004, Andrew Bartlett wrote: >> Any suggestions for things to try (or even a guaranteed solution ;-) ) would >> be very much appreciated. >> server signing = no >Try this as yes. How did you get it work? I've tried the "server signing = yes or auto", but it didn't work. Could you kindly tell us how to set the XP to get it

Am 09.06.2017 um 19:55 schrieb Rowland Penny via samba: >> Can anybody please help me, even by simply giving me some hints to >> point me in the right direction to do a deeper investigation? >> >> Thank you very, very much in advance, >> best regards > > Try adding 'ntlm auth = yes' to smb.conf and restart Samba. > It was changed from 'yes'

Thanks Andrew for the answer. But even if I enable Windows XP to use NTLMv2 (using Regedit on (HKEY_LOCAL_MACHINE/SYSTEM/CURRENTCONTROLSET/CONTROL/LSA LMCOMPATIBILITYLEVEL to 5) and adding "ntlm auth = ntlmv1-permitted" to my smb.conf Still the same error. (No *more connections can* be *made* to this remote computer at this time) in versions higher than 4.10. Any ideas? Best Regards

Hi all, In my win2k ADS server(mixed mode), I have set the LAN Manager authentication level to Send NTLMv2 response only\refuse LM & NTLM. In the registry, i also set HKLM\System\CurrentControlSet\Control\Lsa|lmcompatibilitylevel --> level 5 (accepts only NTLMv2). Similarly, i also set HKLM\System\CurrentControlSet\Control\Lsa\MSV1_0\NtlmMinClientSec --> 0x00080000(NTLMv2 Session

Hi All, I am having an issue with Samba joining an active directory domain. When I run 'net ads join -S mydomaincontrollerFQDN -U adminuser command I get this error: Failed to join domain: failed to lookup DC info for domain 'MYDOMAIN.COM' over rpc: Logon failure The credentials we entered are for sure correct but if we see our domain controller it count it

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Attached is a patch to add a progress meter for ssh-keygen similar to the one in the commercial ssh1. Was this left out of the OpenBSD version because of security concerns? Regards, Damien Miller - -- | "Bombay is 250ms from New York in the new world order" - Alan Cox | Damien Miller - http://www.mindrot.org/ | Email: djm at mindrot.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi all, What would be the recommended way to remove an old offline DC from Samba4? I searched in samba-tool for a way to do this, but didn't find any. Tried using the Windows tools to manage AD Users & Computers -> Domain Controllers -> The DC & then hit delete, however this gives an error 'cannot find specified module'.

Hi, I hope some of you have been in a similar situation and can shed some light on this: I have a VPN connection to a Samba 4.1.4 server and when I use Word 2010 on a W7 client to open an existing file I often get the following error: "document.docx has been locked for editing by another user." I should clarify that the document is not in use by anyone (confirmed by smbstatus), and

Hi, After our upgrade from Samba 3.x to 4.1.6 we are having major performance issues. Today, I've been able to nail it down to a simple test case. What strikes me is that Windows XP takes about 25 seconds for one job, while it only costs 3 seconds on Windows 7. I have two tests: 1000 files of 10k each (total ~10Mb): * Linux on localhost or a remote host (1GE or 10GE): 5.5 seconds *

Hi all, I'm running Samba 4.1.6 with Ubuntu 14.04.1 LTS on a Power 8 box. Here is my smb.conf file: [global] client lanman auth = yes client ntlmv2 auth = no lanman auth = yes netbios name = myName map untrusted to domain = yes log level = 3 [myshare] path = /home/myuser/myshare available = yes valid users = myuser read only = no browseable = yes public = yes writable = yes When I try to

Are there multiple ways that Windows clients encrypt passwords? I'm seeing different behavior between two clients. On one, I can access a Samba share just fine. On the other, using the same username and password to access the same share, I get "incorrect password." Looking for the difference in Samba debug traces, I find it comes down to this: smb_password_ok: Checking SMB