Samba list please help me... Do I have to have DES-CBC-MD5 to connect from a windows xp or 2k pc?
I noticed the Official Samba How-To say Samba can use both DES-CBC-MD5 & ARCFOUR-HMAC-MD5. The later doesn't seem to work for me. Mandrake 9.2 samba3.0.1-0.pre3.2.mkd > [2003/12/09 17:13:20, 3] > libads/kerberos_verify.c:ads_verify_ticket(325) > ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption > type) > [2003/12/09 17:13:20, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) > Failed to verify incoming ticket! > [2003/12/09 17:13:20, 3] smbd/error.c:error_packet(118) > error packet at smbd/sesssetup.c(173) cmd=115 (SMBsesssetupX) > NT_STATUS_LOGON_FAILURE > [2003/12/09 17:13:20, 3] smbd/process.c:timeout_processing(1099) > timeout_processing: End of file from client (client has > disconnected). This is my klist -e: > alid starting Expires Service principal > 12/09/03 14:31:15 12/10/03 00:31:47 krbtgt/[EMAIL PROTECTED] > renew until 12/10/03 14:31:15, Etype (skey, tkt): DES cbc mode with CRC-32, > DES cbc mode with CRC-32 > 12/09/03 14:32:12 12/10/03 00:31:47 [EMAIL PROTECTED] > renew until 12/10/03 14:31:15, Etype (skey, tkt): ArcFour with HMAC/md5, > ArcFour with HMAC/md5 > 12/09/03 14:32:34 12/10/03 00:31:47 [EMAIL PROTECTED] > renew until 12/10/03 14:31:15, Etype (skey, tkt): ArcFour with HMAC/md5, > ArcFour with HMAC/md5 > > > Kerberos 4 ticket cache: /tmp/tkt0 > klist: You have no tickets cached I'm going crazy trying to get this to work... Thank you, Tim smb.conf #======================= Global Settings ===================================== [global] # 1. Server Naming Options: workgroup = MYDOMAIN realm = MYDOMAIN.AK server string = Samba Server %v # 2. Printing Options: printcap name = cups load printers = yes printing = cups # This should work well for winbind: printer admin = @"Domain Admins" # 3. Logging Options: log file = /var/log/samba3/log.%m max log size = 50 log level = 3 # 4. Security and Domain Membership Options: security = ads password server = IP OF PDC encrypt passwords = yes # 5. Winbind winbind uid = 10000-20000 winbind gid = 10000-20000 winbind use default domain = yes allow trusted domains = no template homedir = /home/%D/%U obey pam restrictions = yes template shell = /bin/bash # 5. Browser Control and Networking Options: socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no os level = 0 domain master = no preferred master = no # 6. Domain Control Options: domain logons = no add user script = /usr/sbin/useradd -s /bin/false '%u' idmap uid = 10000-20000 idmap gid = 10000-20000 # 7. Name Resolution Options: name resolve order = wins lmhosts bcast wins server = IP OF WINS SERVER dns proxy = no #============================ Share Definitions ============================== [homes] comment = Home Directories browseable = no writable = yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
