One more thing to add: I'm pretty sure you cannot force signing and still send unencrypted passwords to third party SMB servers (which Samba is): Microsoft network client: Send unencrypted password to third-party SMB servers Enabled Otherwise that also seems to conflict... On Sep 26, 2012 11:06 AM, "Bill Chockla" <[email protected]> wrote:
> > > Hello, > Has anyone had a chance to review this question? > Thank you, > Bill > > ----- Forwarded by Bill Chockla/Durham/Contr/IBM on 09/26/2012 10:04 AM > ----- > > From: Bill Chockla/Durham/Contr/IBM > To: [email protected], > Date: 09/10/2012 12:52 PM > Subject: Connection fails with Server/Client Signing = Mandatory > > > Hello, > When I add "server signing = mandatory" to my smb.conf file (AIX V6.1, > 6100-04-11-1140 running Samba v3.6.5) that has "encrypt passwords = no", my > windows client no longer can connect. It fails with system error 64. > > The windows system is running XP vers 2002 with service pack 3. The > security settings are set to: > Microsoft network client: Digitally sign communications (always) > Disabled > Microsoft network client: Digitally sign communications (if server > agrees) Enabled > Microsoft network client: Send unencrypted password to third-party > SMB servers Enabled > Microsoft network server: Amount of idle time required before > suspending session 15 minutes > Microsoft network server: Digitally sign communications (always) > Disabled > Microsoft network server: Digitally sign communications (if client > agrees) Disabled > Microsoft network server: Disconnect clients when logon hours > expire > Enabled > > Like wise, when I add "server signing = mandatory" to my smb.conf file that > has "encrypt passwords = yes" (and "passdb backend = smbpasswd" with valid > id/password in the smbpasswd file), my AIX client no longer can connect. > > I have added "client signing = mandatory" to smb.conf also and get the same > results (unencrypted: windows clients cannot connect. encrypted: aix > clients cannot connect). > > Are there any known problems in v3.6.5 related to these connection > problems? Are there any fixes in newer releases? > > I have logs with debug level 5 for the connection problem sequences if > someone needs that information. I can ftp them if someone can give me an > ftp site, id/password. > Thank you in advance for your help! > Bill Chockla > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
