On Tue, 2004-03-02 at 11:28, Ron Dhillon wrote:
> Hi:
> 
> I have Samba 3.0.2a running on Fedora Core 1.  This server is set to be 
> Domain PDC and I am looking to have clients attach to it NTLMv2 only.  
> After looking over the man page for smb.conf, I have set the two options 
> that I thought would accomplish:
> 
> [Global]
> lanman auth = no
> ntlm auth = no
> 
> On the workstation side, I have set 
> HKLM\SYSTEM\CurrentControlSet\Control\Lsa\lmcompatibilitylevel to "5".  
> When I try to join the clients to the domain, I get the error:
> 
> "Logon Failure: Unknown Username or Bad Password"

Ahh.  Is this issue only in the domain join process?  Or once machines
are joined, do they still do the same thing?

> If I change the line, in smb.conf, for ntlm auth to "yes" and set the 
> client registry key to "2" then I have no problem.  NTLMv1 seems to be 
> negotiated without any problems but NTLMv2 hasn't been quite so easy.
> 
> Any suggestions would be appreciated!

I'll need to see level 10 debug logs, and an ethereal trace before I can
give you a decent answer on this.  The client may not be sending it
right, or we might not be reading it right.

Andrew Bartlett

-- 
Andrew Bartlett                                 [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org     http://build.samba.org     http://hawkerc.net

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to