Re: [squid-users] Problem with smb_auth and Windows 2003 Server Domain

Hi,

At 09.28 08/12/2005, Johan Pretorius wrote:

>I then get this output:
>cli_negprot: SMB signing is mandatory and we have disabled it.
>25299: protocol negotiation failed
>SMB connection failed
>
>Is there possibly security settings I have to set in my Windows Domain
>(Group Policies)?
>
>A search on the web revealed that the smbclient doesn't support SMB signing
>which is a default requirement on 2003 server domains.
>
>Any help will be appreciated,

Correct, in Windows 2003 AD domains SMB signing is enabled by default.

http://support.microsoft.com/default.aspx?scid=kb;en-us;887429
http://support.microsoft.com/default.aspx?scid=kb;en-us;823659

If you want to disable it, you should change into your Domain Default Policy
"Microsoft network server: Digitally sign communications (always)
Policy Setting:" from enabled to disabled. Probably you need to
reboot your DCs after the change.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Thu Dec 08 2005 - 02:55:57 MST