Since the LM Compatibility Level of your Solaris CIFS server is set to 
5, it will reject any client that doesn't use NTLMv2 authentication.  Is 
that really what you want? If so, you need to set the value of the 
lmcompatibilitylevel registry key to 3 or above on your Windows Vista.

If it doesn't really matter whether NTLM or NTLMv2 authentication is 
used, try setting the lmauth_level to the default value (i.e. level 4) 
on your Solaris CIFS server to see if the problem goes away:

sharectl set -p lmauth_level=5 smb


Regards,

Natalie

Rafal Pratnicki wrote:

>How do I configure the smb/server service on my Nevada machine:
>1. I make sure I'm running smb/server and idmap services.
>svcs smb/server idmap
>2. Configuration of the idmap mapping:
>idmap remove -a
>idmap add "winuser:[EMAIL PROTECTED]" "unixuser:*"
>idmap add "wingroup:[EMAIL PROTECTED]" "unixgroup:*"
>3. Joining WORKGROUP
>smbadm join -w WORKGROUP
>4. configuring /etc/pam.conf
>echo "other    password required       pam_smb_passwd.so.1 nowarn" 
>>>/etc/pam.conf
>4. Creating a zfs filesystem:
>zpool create smbpoolt $zfsTankFile
>zfs set sharesmb=on smbpoolt
>zfs create -o casesensitivity=mixed smbpoolt/fs1
>zfs create -o casesensitivity=mixed smbpoolt/fs2
>mkdir -m 777 /smbpoolt/fs1/data1
>mkdir -m 777 /smbpoolt/fs2/data2
>sharemgr create -P smb netsmbshares
>sharemgr add-share -r "data1" -s "/smbpoolt/fs1/data1" netsmbshares
>sharemgr add-share -r "data2" -s "/smbpoolt/fs2/data2" netsmbshares
>
>-- All done -- should work but doesn't for me.
>
>What I do on my windows Vista machine to map the share from solaris:
>net use g: \\snake\data1
>Enter the user name for eagle: rafal
>Enter the password for eagle: abc
>The specified network password in not correct
>
>Machines names: Solaris: eagle, Vista: snake
>users on both machines the same: rafal, pass: abc
>
>Output from my script which setups everything automaticly on the solaris box:
>bash-3.2# ./setup_cifs_server
>online         22:50:38 svc:/network/smb/server:default
>online         22:50:38 svc:/network/smb/server:default
>STATE          STIME    FMRI
>online         22:50:37 svc:/system/idmap:default
>online         22:50:38 svc:/network/smb/server:default
>add     winuser:[EMAIL PROTECTED]    unixuser:*
>add     wingroup:[EMAIL PROTECTED]    unixgroup:*
>idmap: post configuration checks
>Internal error
>uid:102 -> sid:S-1-5-21-2239080101-1256048204-3338185557-1906026805-1102
>add     winuser:[EMAIL PROTECTED]    unixuser:*
>add     wingroup:[EMAIL PROTECTED]    unixgroup:*
>Successfully joined workgroup 'WORKGROUP'
>-------------------------------------------------------------------------
> pool: smbpoolt
>state: ONLINE
>scrub: none requested
>config:
>
>   NAME                             STATE     READ WRITE CKSUM
>   smbpoolt                         ONLINE       0     0     0
>     /autohome/smbtest/zfsTankFile  ONLINE       0     0     0
>
>errors: No known data errors
>-------------------------------------------------------------------------
>NAME      PROPERTY     VALUE       SOURCE
>smbpoolt  size         95.5M       -
>smbpoolt  used         169K        -
>smbpoolt  available    95.3M       -
>smbpoolt  capacity     0%          -
>smbpoolt  altroot      -           default
>smbpoolt  health       ONLINE      -
>smbpoolt  guid         1558988827904041562  -
>smbpoolt  version      10          default
>smbpoolt  bootfs       -           default
>smbpoolt  delegation   on          default
>smbpoolt  autoreplace  off         default
>smbpoolt  cachefile    -           default
>smbpoolt  failmode     wait        default
>-------------------------------------------------------------------------
>NAME          PROPERTY         VALUE                  SOURCE
>smbpoolt/fs1  type             filesystem             -
>smbpoolt/fs1  creation         Sat Mar 15 23:40 2008  -
>smbpoolt/fs1  used             18K                    -
>smbpoolt/fs1  available        63.3M                  -
>smbpoolt/fs1  referenced       18K                    -
>smbpoolt/fs1  compressratio    1.00x                  -
>smbpoolt/fs1  mounted          yes                    -
>smbpoolt/fs1  quota            none                   default
>smbpoolt/fs1  reservation      none                   default
>smbpoolt/fs1  recordsize       128K                   default
>smbpoolt/fs1  mountpoint       /smbpoolt/fs1          default
>smbpoolt/fs1  sharenfs         off                    default
>smbpoolt/fs1  checksum         on                     default
>smbpoolt/fs1  compression      off                    default
>smbpoolt/fs1  atime            on                     default
>smbpoolt/fs1  devices          on                     default
>smbpoolt/fs1  exec             on                     default
>smbpoolt/fs1  setuid           on                     default
>smbpoolt/fs1  readonly         off                    default
>smbpoolt/fs1  zoned            off                    default
>smbpoolt/fs1  snapdir          hidden                 default
>smbpoolt/fs1  aclmode          groupmask              default
>smbpoolt/fs1  aclinherit       secure                 default
>smbpoolt/fs1  canmount         on                     default
>smbpoolt/fs1  shareiscsi       off                    default
>smbpoolt/fs1  xattr            on                     default
>smbpoolt/fs1  copies           1                      default
>smbpoolt/fs1  version          3                      -
>smbpoolt/fs1  utf8only         off                    -
>smbpoolt/fs1  normalization    none                   -
>smbpoolt/fs1  casesensitivity  mixed                  -
>smbpoolt/fs1  vscan            off                    default
>smbpoolt/fs1  nbmand           off                    default
>smbpoolt/fs1  sharesmb         on                     inherited from smbpoolt
>smbpoolt/fs1  refquota         none                   default
>smbpoolt/fs1  refreservation   none                   default
>NAME          PROPERTY         VALUE                  SOURCE
>smbpoolt/fs2  type             filesystem             -
>smbpoolt/fs2  creation         Sat Mar 15 23:40 2008  -
>smbpoolt/fs2  used             18K                    -
>smbpoolt/fs2  available        63.3M                  -
>smbpoolt/fs2  referenced       18K                    -
>smbpoolt/fs2  compressratio    1.00x                  -
>smbpoolt/fs2  mounted          yes                    -
>smbpoolt/fs2  quota            none                   default
>smbpoolt/fs2  reservation      none                   default
>smbpoolt/fs2  recordsize       128K                   default
>smbpoolt/fs2  mountpoint       /smbpoolt/fs2          default
>smbpoolt/fs2  sharenfs         off                    default
>smbpoolt/fs2  checksum         on                     default
>smbpoolt/fs2  compression      off                    default
>smbpoolt/fs2  atime            on                     default
>smbpoolt/fs2  devices          on                     default
>smbpoolt/fs2  exec             on                     default
>smbpoolt/fs2  setuid           on                     default
>smbpoolt/fs2  readonly         off                    default
>smbpoolt/fs2  zoned            off                    default
>smbpoolt/fs2  snapdir          hidden                 default
>smbpoolt/fs2  aclmode          groupmask              default
>smbpoolt/fs2  aclinherit       secure                 default
>smbpoolt/fs2  canmount         on                     default
>smbpoolt/fs2  shareiscsi       off                    default
>smbpoolt/fs2  xattr            on                     default
>smbpoolt/fs2  copies           1                      default
>smbpoolt/fs2  version          3                      -
>smbpoolt/fs2  utf8only         off                    -
>smbpoolt/fs2  normalization    none                   -
>smbpoolt/fs2  casesensitivity  mixed                  -
>smbpoolt/fs2  vscan            off                    default
>smbpoolt/fs2  nbmand           off                    default
>smbpoolt/fs2  sharesmb         on                     inherited from smbpoolt
>smbpoolt/fs2  refquota         none                   default
>smbpoolt/fs2  refreservation   none                   default
>-------------------------------------------------------------------------
>system_comment=
>max_workers=64
>netbios_scope=
>lmauth_level=5
>keep_alive=5400
>wins_server_1=
>wins_server_2=
>wins_exclude=
>signing_enabled=false
>signing_required=false
>restrict_anonymous=false
>pdc=
>ads_site=
>ddns_enable=false
>autohome_map=/etc
>-------------------------------------------------------------------------
>default nfs=()
>zfs
>   zfs/sandbox smb=()
>     sandbox=/sandbox
>   zfs/sandbox/fs1 smb=()
>     sandbox_fs1=/sandbox/fs1
>   zfs/sandbox/fs2 smb=()
>     sbox=/sandbox/fs2
>   zfs/smbpoolt smb=()
>     smbpoolt=/smbpoolt
>     smbpoolt_fs1=/smbpoolt/fs1     smb=()
>     smbpoolt_fs2=/smbpoolt/fs2     smb=()
>netsmbshares smb=()
>     data1=/smbpoolt/fs1/data1
>     data2=/smbpoolt/fs2/data2
>bash-3.2#
>-- end of the log --
>
>Snooping for packets between both machines reviles that the smb/server response
>with en error:
>
>SMB: Command name = SMBsesssetupX
>SMB:
>SMB: SMB Status:
>SMB: - Error class = LMX server
>SMB: - Error code = 2
>
>bash-3.2# snoop -i /tmp/snoop-login-after-policy-change -v host snake | egrep 
>SMB
>SMB: ----- SMB Header -----
>SMB:
>SMB: CLIENT REQUEST
>SMB: Command code = 0x72
>SMB: Command name = SMBnegprot
>SMB:
>SMB: SMB Status:
>SMB: - Error class = No error
>SMB: - Error code = No error
>SMB:
>SMB: Header:
>SMB: - Tree ID (TID) = 0xffff
>SMB: - Process ID (PID) = 0xfeff
>SMB: - User ID (UID) = 0x0000
>SMB: - Multiplex ID (MID) = 0x0000
>SMB: - Flags summary = 0x18
>SMB: - Flags2 summary = 0xc853
>SMB:
>SMB: ByteCount = 109
>SMB: Dialect String = PC NETWORK PROGRAM 1.0
>SMB: Dialect String = LANMAN1.0
>SMB: Dialect String = Windows for Workgroups 3.1a
>SMB: Dialect String = LM1.2X002
>SMB: Dialect String = LANMAN2.1
>SMB: Dialect String = NT LM 0.12
>SMB: Dialect String = SMB 2.001
>SMB:
>SMB: ----- SMB Header -----
>SMB:
>SMB: SERVER RESPONSE
>SMB: Command code = 0x72
>SMB: Command name = SMBnegprot
>SMB:
>SMB: SMB Status:
>SMB: - Error class = No error
>SMB: - Error code = No error
>SMB:
>SMB: Header:
>SMB: - Tree ID (TID) = 0xffff
>SMB: - Process ID (PID) = 0xfeff
>SMB: - User ID (UID) = 0x0000
>SMB: - Multiplex ID (MID) = 0x0000
>SMB: - Flags summary = 0x90
>SMB: - Flags2 summary = 0x8053
>SMB:
>SMB: Protocol Index = 5
>SMB:
>SMB: ----- SMB Header -----
>SMB:
>SMB: CLIENT REQUEST
>SMB: Command code = 0x73
>SMB: Command name = SMBsesssetupX
>SMB:
>SMB: SMB Status:
>SMB: - Error class = No error
>SMB: - Error code = No error
>SMB:
>SMB: Header:
>SMB: - Tree ID (TID) = 0x0000
>SMB: - Process ID (PID) = 0xfeff
>SMB: - User ID (UID) = 0x0000
>SMB: - Multiplex ID (MID) = 0x0040
>SMB: - Flags summary = 0x18
>SMB: - Flags2 summary = 0xc807
>SMB:
>SMB: ChainedCommand = 0x75
>SMB: NextOffset = 0x008a
>SMB: MaxBufferSize = 0x9400
>SMB: MaxMPXRequests = 50
>SMB: VCNumber = 0
>SMB: SessionKey = -4554132
>SMB: PasswordLength = 0x0018
>SMB: UnicodePasswordLength = 0x0018
>SMB: Capabilities = 0x000000d4
>SMB: ByteCount = 77
>SMB: AccountName = rafal
>SMB: DomainName =
>SMB: NativeOS =
>SMB: NativeLanman = snake
>SMB:
>SMB: ----- SMB Header -----
>SMB:
>SMB: SERVER RESPONSE
>SMB: Command code = 0x73
>SMB: Command name = SMBsesssetupX
>SMB:
>SMB: SMB Status:
>SMB: - Error class = LMX server
>SMB: - Error code = 2
>SMB:
>SMB: Header:
>SMB: - Tree ID (TID) = 0x0000
>SMB: - Process ID (PID) = 0xfeff
>SMB: - User ID (UID) = 0x0000
>SMB: - Multiplex ID (MID) = 0x0040
>SMB: - Flags summary = 0x90
>SMB: - Flags2 summary = 0x8807
>SMB:
>SMB:
>SMB: ----- SMB Header -----
>SMB:
>SMB: CLIENT REQUEST
>SMB: Command code = 0x73
>SMB: Command name = SMBsesssetupX
>SMB:
>SMB: SMB Status:
>SMB: - Error class = No error
>SMB: - Error code = No error
>SMB:
>SMB: Header:
>SMB: - Tree ID (TID) = 0x0000
>SMB: - Process ID (PID) = 0xfeff
>SMB: - User ID (UID) = 0x0000
>SMB: - Multiplex ID (MID) = 0x0080
>SMB: - Flags summary = 0x18
>SMB: - Flags2 summary = 0xc807
>SMB:
>SMB: ChainedCommand = 0x75
>SMB: NextOffset = 0x008a
>SMB: MaxBufferSize = 0x9400
>SMB: MaxMPXRequests = 50
>SMB: VCNumber = 0
>SMB: SessionKey = -4554132
>SMB: PasswordLength = 0x0018
>SMB: UnicodePasswordLength = 0x0018
>SMB: Capabilities = 0x000000d4
>SMB: ByteCount = 77
>SMB: AccountName = rafal
>SMB: DomainName =
>SMB: NativeOS =
>SMB: NativeLanman = snake
>SMB:
>SMB: ----- SMB Header -----
>SMB:
>SMB: SERVER RESPONSE
>SMB: Command code = 0x73
>SMB: Command name = SMBsesssetupX
>SMB:
>SMB: SMB Status:
>SMB: - Error class = LMX server
>SMB: - Error code = 2
>SMB:
>SMB: Header:
>SMB: - Tree ID (TID) = 0x0000
>SMB: - Process ID (PID) = 0xfeff
>SMB: - User ID (UID) = 0x0000
>SMB: - Multiplex ID (MID) = 0x0080
>SMB: - Flags summary = 0x90
>SMB: - Flags2 summary = 0x8807
>SMB:
>SMB: 
>
>Have you seen this before or I'm missing something in my configuration.
>
>Thanks,
>Rafal
> 
> 
>This message posted from opensolaris.org
>_______________________________________________
>storage-discuss mailing list
>[email protected]
>http://mail.opensolaris.org/mailman/listinfo/storage-discuss
>  
>

_______________________________________________
storage-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/storage-discuss

Reply via email to