SMB shares and Tiger

Tommo · #1 May 6th, 2005, 06:48 AM

I am having trouble connecting to some smb shares since installing Tiger. If I login using a local account I can connect to these shares via go to server or by browsing with no problem at all.

However is I login against the Active Directory I get a -36 error if I go to server and if I try and browse I get a broken alias error. I think it is trying to use NTLMv2 authentication not NTLMv1.

Any help with this would be greatly appreciated.

The Ghost · #2 May 6th, 2005, 11:08 AM

Quote:

Originally Posted by Tommo

I am having trouble connecting to some smb shares since installing Tiger. If I login using a local account I can connect to these shares via go to server or by browsing with no problem at all.

However is I login against the Active Directory I get a -36 error if I go to server and if I try and browse I get a broken alias error. I think it is trying to use NTLMv2 authentication not NTLMv1.

Any help with this would be greatly appreciated.

Please decribe your situation completely--hardware, what your are trying to share, etc.

kevster · #3 May 6th, 2005, 11:35 AM

Tiger now assumes that your smb server accepts encrypted passwords. Older Windows NT and Unix/Linux servers running Samba (versions older that 3.0) are configured to accept Plain Text passwords. It is highly recommended that the severs be re-configured to accept encrypted passwords. However below is a fix to tell Tiger to send a plain text password for authentication. This assumes you have a working knowledge of the unix command line.

1. open a terminal session
2. cd /etc
3. sudo vi nsmb.conf (NOT the smb.conf file...this may ADD a new file...)
4. add these lines...
[default]
minauth=none

5. save file (wq)

BE AWARE that this now sends plain text and can be easily captured (via tcpdunp).

Tommo · #4 May 9th, 2005, 03:14 AM

The problem I am having is connecting to a file share on a Network Appliance Filer. All shares on my Windows 2000/2003 servers connect with no problem. I have looked into the encryption issue for passwords, but does not appear to be the case as I assume the password is sent in the same manner regardless of how you have authenticated on the Mac.

In trawling other forums and pages it appears that OS 10.4 has broken quite a bit of networking, since upgrading at home I no longer have an iternet connection and have no idea why as everything reports as being connected :-(

Pengu · #5 May 9th, 2005, 03:27 AM

maybe the network appliance doesn't accept encrypted passwords?

Tommo · #6 May 9th, 2005, 03:39 AM

Oh it does, I can't believe that they are sent encrypted under AD authentication and ont under local when connecting to the same server with the same AD account.

I know it can only accept NTLMv1 password, but according to my reading of the /etc/smb.conf file NTLMv2 encryption is not switched on. If anyone knows of somewhere else in the GUI to disable it I would be very grateful if they would let me know ?

Clivey · #7 May 9th, 2005, 05:34 AM

Hello. I have in the past, automatically installed the MS UAM for OS X - this gives some options on the fly without having to edit .conf files.
I couldn't (bizarrely) find on the MS site, but it full title is 'Install MSUAM for X.pkg'. A google may help, alternatively, (since it's freeware) mail your email address and I'll send it to you.
Regards

Tommo · #8 May 9th, 2005, 09:05 AM

Managed to find a copy, but that has not helped, thanks. I have also found the same problem afflicts our network printers under Tiger. Odd as I am able to connect to shares on the print server.