[14848] in Kerberos

home help back first fref pref prev next nref lref last post

Re: XP Client Trying to use Kerberos instead of SMB to Samba Server

daemon@ATHENA.MIT.EDU (Don Hiscock)
Tue Jul 31 18:09:46 2001

From: "Don Hiscock" <dhiscock@ssbux1.env.gov.bc.ca>
Date: Tue, 31 Jul 2001 15:02:20 -0700
Message-ID: <3b672aff$1@obsidian.gov.bc.ca>
To: kerberos@MIT.EDU

But it works if we remove the samba server's host principal from active
directory.

Gerald Carter <gcarter@valinux.com> wrote in message
news:Pine.LNX.4.33.0107311524510.14234-100000@pogo.plainjoe.org...
> On Tue, 31 Jul 2001, Mayers, Philip J wrote:
>
> > Interesting - check the security policy on the machine. Windows *should*
be
> > able to detect that you're talking to a non-Kerberised SMB server and
> > downgrade. Have you tried it against an NT4 server, for example? The
same
> > thing *should* happen.
> >
> > Very interesting - I'd be curious to know what security policy settings
> > you're using (I hope not the defaults).
>
> We have rumours and some confirmation that Windows XP defaults
> to using NTLMv2 only.  This is probably the source of the connection
> problem.
>
>
>
>
>
>
>
> cheers, jerry
>  ---------------------------------------------------------------------
>  www.valinux.com         VA Linux Systems       gcarter_at_valinux.com
>  www.samba.org              SAMBA Team              jerry_at_samba.org
>  www.plainjoe.org                                jerry_at_plainjoe.org
>  --"I never saved anything for the swim back." Ethan Hawk in Gattaca--
>



home help back first fref pref prev next nref lref last post