Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power

 View Only
  • 1.  Samba access after disabling ntlvm1

    Posted Tue December 10, 2019 05:30 PM

    Originally posted by: jcruz


    Our admins for the domain controller have disabled NTLMv1 support due to a security issue.  After doing this our Samba shares were no longer accessible.  Seeing errors in the log:  "NT_STATUS_NO_SUCH_USER" and "failed to find server for "CANLAB" domain".
    Tried adding the following:
    ntlm auth = no
    client ntlmv2 auth = yes


    #AIXOpenSource
    #AIX-Open-Source-Software


  • 2.  Re: Samba access after disabling ntlvm1

    Posted Wed December 11, 2019 09:05 AM

    Originally posted by: AyappanP


    From Samba 4.5 onwards , by default NTLMv1 auth is disabled.

    https://www.samba.org/samba/history/samba-4.5.0.html

    What is the version of Samba you are using ? 


    #AIX-Open-Source-Software
    #AIXOpenSource


  • 3.  Re: Samba access after disabling ntlvm1

    Posted Wed December 11, 2019 09:44 AM

    Originally posted by: jcruz


    We are running 4.6.16.


    #AIXOpenSource
    #AIX-Open-Source-Software


  • 4.  Re: Samba access after disabling ntlvm1

    Posted Wed December 11, 2019 10:08 AM

    Originally posted by: AyappanP


    You need to see the Samba logs to see whether the clients try to use the NTLMv1 authentication. 


    #AIXOpenSource
    #AIX-Open-Source-Software


  • 5.  Re: Samba access after disabling ntlvm1

    Posted Wed December 11, 2019 03:22 PM

    Originally posted by: jcruz


    this is on a test aix samba server and i'm trying to access the share from a windows 10 machine and in the log i see something like this:

    [2019/12/11 13:52:16.133171,  5, pid=4128952] ../auth/ntlmssp/ntlmssp_sign.c:633(ntlmssp_sign_reset)
      NTLMSSP Sign/Seal - using NTLM1
    [2019/12/11 13:52:16.161833,  3, pid=4128952] ../source3/libsmb/cliconnect.c:1675(cli_session_setup_creds_done_spnego)
      SPNEGO login failed: The request is not supported.

    this occurs even with:
    ntlm auth = no or yes
    client ntlmv2 auth = yes

     


    #AIX-Open-Source-Software
    #AIXOpenSource


  • 6.  Re: Samba access after disabling ntlvm1

    Posted Thu December 12, 2019 02:01 AM

    Originally posted by: AyappanP


    I think you need to check the windows 10 machine whether it still uses NTLMv1 for authentication. 


    #AIXOpenSource
    #AIX-Open-Source-Software