similar to: authentication issues

My customer has a Centos Linux 5.10 server running Samba 3. (Samba version 3.0.33-3.40.el5_10) The machine is about three years old. I suggested that they should consider replacing it with a Centos 6 machine and Samba 4, but they decided as it was doing its job without any issues to keep it as is. I also suggested updating to samba3x but they decided not to do this. I recently installed a centos

I had to deal with ransomware at the end of April. One of the PCs on my customer's network was infected by opening a realistic looking email apparently from a genuine supplier to the company and personally addressed. The infection occurred on Wednesday, but encryption of the server only took place late on Friday afternoon, presumably having obtained encryption keys from the criminals. The

Am 16.05.2016 um 01:05 schrieb jacek burghardt: > Iscsi cant be encrypted. what has this to do with samba and who has iSCSI (SAN) on the normal network instead a seperated storage network or in case of a small VMware cluster with 2 hosts even not just 2 network cables from each to the SAN-storage with no switch at all? > On Sun, May 15, 2016 at 3:30 PM, peter lawrie < >

I've been running Samba 4 in NT4 Domain mode for a few years, and it's been working fine with Windows 7 PCs. I now need to join a new Windows 10 PC to the domain, but I'm not having any success! When I try to join the domain, the Windows 10 PC says "An Active Directory Domain Controller could not be contacted...." I've tried a few things, including:- Setting

Hi All, Server: Fedora 26 samba-4.6.8-0.fc26.x86_64 Workstations (5 of them): XP Pro SP3 I set all five of my customer XP workstations to Send NTLMv2 response only\\refuse LM and NTLM and turned off (smb.conf) lanman auth = yes ntlm auth = yes And had to turn it right back on as the customer's Xerox Workcentre 3550 multifunction printer scanner requires it What are

> > It might help if you told us how Extreme advised you to configure it. https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-set-internal-RADIUS-server-on-WiNG-with-LDAP-based-authentication http://www.michaelfmcnamara.com/files/motorola/WING5X_How_To_Active_Directory_Authentication_Rev_B.pdf https://www.manualslib.com/manual/1150860/Motorola-Wing-5-7-1.html

I discovered the situation. When attempting to logon from Windows 2008R2 to Samba4 is made we can see in Samba smbd log the following important for understanding the situation lines: [2017/11/20 13:25:52.040094, 2, pid=7100, effective(0, 0), real(0, 0)] ../libcli/auth/ntlm_check.c:430(ntlm_password_check) ntlm_password_check: NTLMv1 passwords NOT PERMITTED for user <username> [2017/11/20

On Fri, 9 Mar 2018 15:46:23 +0000 peter lawrie <peter.lawrie at glendiscovery.co.uk> wrote: > Dear Rowland > Thank you for the reply. > I thought I had probably created an insecurity - but no worse than > before! The previous samba was version 3.6.23-13.el5_11 on Centos > 5.11 > > I installed windows 10 PCs for them last year, replacing their XP > machines and

Hi Centos linux 5.11 server with samba3.6.23-6.el5 with workgroup (not domain) This system has been running for four years with no real issues. There are 9 xp clients all within the workgroup, rather than connected to the domain. The server is used for windows shares and for openwebmail This week I had a problem with the draytek 2820 adsl router. I had to reset it and update to the latest 2014

Hello, i set up a squid proxy that should authenticate users against a samba PDC using winbind. It works fine as long i allow ntlmv1: on the PDC: ntlm auth = yes lanman auth = no client ntlmv2 auth = yes If i restrict the domains authentication method to ntlmv2 - that's what i want - with these settings: ntlm auth = no lanman auth = no client

Hi Some advice needed on samba-3.6.6 for win7 Since getting my win7 ultimate pc, I've only used my centos server with samba for a workgroup connection. Previously I had an XP client on this domain. I've updated today (17 feb 2013) to the latest centos5.9 (Linux 2.6.18-348.1.1.el5.centos.plus on i686) which includes samba3x with samba-3.6.600.129_el5 passdb backend has to be tdbsam now for

Hello Helper, i found this bug report: https://bugzilla.samba.org/show_bug.cgi?id=12252 At this time i have a samba 4.1.6 Domain Controller and Freeradius-Server. The authentication works pretty well in 4.1.6. Now I built a new Domain Controller from source, version 4.5.0. The configuration like 4.1.6, but now I have an authentication issue. There is no helpfull information in freeradius log

Are there multiple ways that Windows clients encrypt passwords? I'm seeing different behavior between two clients. On one, I can access a Samba share just fine. On the other, using the same username and password to access the same share, I get "incorrect password." Looking for the difference in Samba debug traces, I find it comes down to this: smb_password_ok: Checking SMB

> On 10/02/17 17:16, ToddAndMargo via samba wrote: >> Hi All, >> >> Server: >>    Fedora 26 >>    samba-4.6.8-0.fc26.x86_64 >> >> Workstations (5 of them): >>    XP Pro SP3 >> >> >> I set all five of my customer XP workstations to >> >> Send NTLMv2 response only\\refuse LM and NTLM >> >> and turned off

hai,   Please keep it mailing to the list, this way is shows up of others also. A workaround for disabling SMBv1, you can make your server less secure but thats not what i would do. Setting these to enable NTLM v1 again. lanman auth = yes ntlm auth = yes raw NTLMv2 auth = yes I think also this is more a question for the free raduis list, but i would to for a ldap(s) setup. just dont mixup

On Fri, 9 Mar 2018 16:55:24 +0000 peter lawrie <peter.lawrie at glendiscovery.co.uk> wrote: > here is the current smb.conf I would start with this smb.conf: [global] workgroup = dpcl security = user netbios name = dpcl1 server string = %h max server protocol = smb2 cups options = raw printing = cups hosts allow = 127.

Hello Andrew, Do you plan to release the patch for "ntlm auth = mschapv2-only" option soon ? We need this on order to use freeradius in a "more safe" scenario than with "ntlm auth = yes" Best Regard, Lulzim KELMENI Direction des Systèmes d'Information Mairie de Saint-Ouen Le 08/06/2017 21:36, Andrew Bartlett via samba a écrit : > On Thu, 2017-06-08 at

Hi there, I'm trying to get FreeRADIUS to authenticate against my Samba DC. It's Samba 4.7.6-ubuntu running on Ubuntu 18 (kernel version 4.15.0-66-generic). It came nicely packaged with Zentyal, which provides a nice GUI for managing a domain, as well as a CA and lots of cool small features. That same Zentyal also includes support for FreeRADIUS (3.0.16). This is my smb.conf:

Am 2017-11-11 um 13:36 schrieb Rowland Penny: > As far as I am aware, 'net use' sends the password unencrypted, so if > someone is trying to 'sniff' the password, they will get it, but then > if the password is stored in the bat file unencrypted and anybody can > read the bat file, they wont need to 'sniff' the password. Yes, we know ;-) The thin client with

On 05.10.20 11:26, Rowland penny via samba wrote: > Stop me if I am wrong, but, from memory (long time since I saw a win95 > machine), win9x never used kerberos, it only used lanman auth, so > changes to kerberos shouldn't affect you. If it worked on 4.11.x, it > should work on 4.12.x You can install an optional Active Directory Service Client for win9x, but that only replaces