similar to: NTLMv2 issues

hey all. we are running samba 3.5.4 on AIX but when client upgrade to Win 7.. none of the client on window can see the share drive on AIX. the error said "window cannot access "servername" .. i know it is group policy causing the problem and once i took out "computer configuration -> windows settings -> security settings -> local policies -> security options

I tested NTLMv2 again using the newly created Samba 3.0.2 (I didn't test 3.0.1). It still doesn't seem to work. Has anyone successfully made NTLMv2 work? If so, can I have a working sample of the smb.conf file? I have included below entries in my smb.conf (among other entries): security = server password server = NTDomainController client ntlmv2 auth = yes On both NTDomainController and

Hi All, I seem to have exactly the same problem which was described in this thread a while ago. I have gone through every piece of information I was able to find on mailing list archives but all I found was people reporting similar problems and not a solution to it. As in the original discussion if I use smbclient it works fine but if I use mount.cifs it does not work at all. To make smbclient

On Sat, 2017-04-22 at 13:41 -0400, pisymbol . wrote: > > > On Fri, Apr 21, 2017 at 5:28 PM, Andrew Bartlett <abartlet at samba.org> > wrote: > > On Fri, 2017-04-21 at 14:12 -0700, Jeremy Allison via samba wrote: > > > Not quickly. Probably best to look into the squid code itself > > > and see how they drive it. > > > > Also look into Wine. 

On Wed, Apr 19, 2017 at 1:08 PM, Jeremy Allison <jra at samba.org> wrote: > > > Any insight, feedback into this issue would be much appreciated. > > The squid program does this. Maybe look into the code they > use for their integration ? > > http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm Jeremy, thanks! That's exactly what I was looking at. So

On Fri, 2017-04-21 at 14:12 -0700, Jeremy Allison via samba wrote: > On Wed, Apr 19, 2017 at 03:47:05PM -0400, pisymbol . wrote: > > On Wed, Apr 19, 2017 at 1:08 PM, Jeremy Allison <jra at samba.org> > > wrote: > > > > > > > Any insight, feedback into this issue would be much > > > > appreciated. > > > > > > The squid

Hello, Has anyone successfully configured Samba 3.0 to authenticate using NTLMv2 only? I have below entry in smb.conf: password server = <domain controller> to use domain controller for user authentication and DC is configured with Level 5 - DC refuses LM and NTLM authentication (accepts only NTLMv2). So far I got: "System error 1326 has occurred. Logon failure: unknown user name or

Hello, context: Samba-3.0.2 on a i386 debian-sarge linux, 2.4 kernel. All the windows machine on our network switched today to NTLMv2, and mount.smbfs can't access anymore ressources which are available to smbclient. Exerpt from smb.conf: client NTLMv2 auth = Yes client lanman auth = No client plaintext auth = No The rest being default. Doing smbclient -L server

Hi, I'm wondering if samba supports NTLMv2, particullary NTLMv2 session security. But I can't even get NTLM-only to work :(. I'm trying to increase lmcompatibilitylevel, but I can't connect to the samba server anymore when I set it to 2 or higher ("Send NTLM authenication only"). I'm using HEAD CVS of today, and my smb.conf looks like this: [global]

Hi, I'm having a problem accessing my samba server from Windows. The problem occurs every time I try to browse to it on either XP or 2003 Server. The error message I get is: "\\Zeus is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions. The account is not authorized to log in

Hi, We are having problems setting up a squid cache server to use NTLMv2 authentication to authenticate users against AD. We have narrowed the problems down to being a problem between samba and squid when using NTLMv2. It constantly moans about the password being wrong when using squid, but doing a direct samba auth works fine. We have (believedly) narrowed it down to this: the domain requires

Hi folks, I have been asked to force NTLMv2 logins to avoid use of LM hashes. To meet the requirement I added some lines to the smb.conf in [Global] (we only have that section anyway - this is purely for domain authentication with an ldap backend): client lanman auth = no client NTLMv2 auth = yes lanman auth = no min protocol = LANMAN2 ntlm auth = no This seemed to work - users

I'm running Centos 4.3 and Samba 3.0.24. I have an OpenLDAP backend. I have successfully got a Windows Domain to work, Windows XP -> Samba -> OpenLDAP. I can add machines to the domain and I can login and change passwords. The trouble is that I'm using NTLM and have been told that I must upgrade to NTLMv2, but I'm having great difficulty doing so. I have existing NTLM users. I

Hi Rowland, do you maybe have any idea what could potentially cause this bug? smbclient thrwos me back a mount error(5): Input/output error when I try to mount the remote smbFS. It doesn't happen with my MacOSx and Windows 7 as client but it happens with Linux OSs and with a Konica Minolta copy machine with a scanner to samba function. The first try to mount fails with the above error.

I have been trying for 3 weeks to get 3.0.21b to work on AIX 5.2. I am currently running 3.0.4, which has no problems. I am getting very frustrated, and am about to give up entirely on Samba. Here are some of the errors I am getting: [<root> mcom4:/opt/Samba/3.0.21b/bin] > ./smbclient -L ccasemcom4 -d 3 -N -Ub06reg%Becky1208 lp_load: refreshing parameters Initialising global

Thank you for your reply. This was not a random link I followed. I have reviewed the Samba documentation at https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller, and all the testing that is listed there results in correct and expected answers... I had already noted the /etc/hosts situation, which interestingly does not change the answers I get in testing

On Tue, 2018-10-16 at 15:18 -0700, Emil Henry wrote: > Hi Andrew! > > I included it in one response, but may have not done a Reply All. Am resending it. > > Thanks. It is reading the hashes, so it looks like it is working. Dumb question, but are you really sure the password is right? Otherwise, it might be some very odd NTLMv2 thing. Try (on the client) 'client ntlmv2 auth

Hi, ? I am using samba+freeRADIUS talk to AD server on win2003 server.?Everything is OK when I use samba-3.0.8.? ? Now I want to updated to samba-3.3.3.? But failed at join to domain controler. (net ads join -U user%pwd). ? debug: Failed to parse NTLMSSP packet, could not extract NTLMSSP command SPNEGO login failed: Invalid parameter failed session setup with NT_STATUS_INVALID_PARAMETER Failed to

Hello my goal is to write an authentication module for the Symfony php framework, which would provide SSO capabilities to browsers that are logged in an MS AD domain and support the NTLMv2 protocol. Ideally this module would run on linux servers, and be portable, i.e. require as few non-php tools and network/firewall settings as possible (that's why I eschewed the existing Apache modules

Hi Thanks in advanced. I'm writing a proxy server doing NTLMv2 authentication. I think I need a NetLogon client service . Is there any available library providing netlogon function? or at least an dce rpc library? an asynchronous library is the best. :) Thanks again. Derek.