Connecting to Samba from Vista RC1

One of the things that is annoying me about Vista is that I can’t
connect to my SMB shares on my Mac. When I try to log in, it rejects my
password. I looked at /var/log/samba/log.smbd on my Mac, and here’s
what I saw:

[2006/09/21 13:55:45, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312)
  User "bjepson" failed to authenticate with
"dsAuthMethodStandard:dsAuthNodeNTLMv2" (-14090)  :( 

So I poked around the Group Policy Edit (type gpedit.msc into the
search or address box and press enter). I drilled down into:

Local Computer Policy
  -> Computer Configuration
    -> Windows Settings
      -> Security Settings
        -> Local Policies
          -> Security Options

and I changed “Network security: LAN Manager authentication level” to
“Send LM & NTLM - use NTLMv2 session security if negotiated” and it
seems to work.

13 Responses to “Connecting to Samba from Vista RC1”

  1. Al Says:

    Ah! Many thanks for this - I’ve been struggling with this all week

  2. Christopher Painter Says:

    Instead of lowering your security posture on Vista, why not configure your Mac to properly support NTLMv2?

    http://www.imss.caltech.edu/cms.php?op=wiki&wiki_op=view&id=337

    http://www.microsoft.com/mac/otherproducts/otherproducts.aspx?pid=windows2000sfm

  3. Brian Jepson Says:

    Thanks, Chris. I didn’t know that Microsoft distributed client bits for Services for Mac. What I’m trying to do is connect from Windows to a Mac Samba server, though. Since this is a client authentication module for the Mac, I’m not sure how it would integrate with the Samba server on the Mac.

  4. ken Says:

    Thank you very much, sir. I’ve been itching to hack around on Vista, but I’m a Mac guy too, so ran into this problem within moments of getting a Vista machine built. Problem solved.

    Thanks again.

  5. ron scheinhaus Says:

    Thanks! You nailed it. I.ve been trying to connect to a Samba server on a suse 9.0 virtual machine running under vista rc1

  6. Shahmir Says:

    Worked like a charm, thnx.

  7. KregerS Says:

    Thanks a ton, it’s to bad “our friends” at M$ don’t make things like this easier.

  8. Adam Says:

    Many thanks - worked a charm here connecting to Mac OS X Server 10.3.9. Saved me hours!!

  9. Paul Says:

    “Brilliant!” i thought to myself as I came across this page.
    “Blast!” i thought to myself as I reaslised my crappy work computer has Vista Home installed and apparently no gpedit.msc.

    Any ideas on how to achieve a similar result on Vista Home?

  10. Yvo van Doorn Says:

    Paul,

    Start up regedit and change this value:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LMCompatibilityLevel from a 3 to a 1

  11. Paul Says:

    Thanks Yvo!

    Worked perfectly once I’d made the change as you described.

    Paul

  12. Shari Says:

    Thanks so much! Worked like a charm! Saved me tons of looking, as our whole company is switching to Vista and I had to figure out how to get it to work :) . Thanks again!

  13. chukaman Says:

    thanks tons for this. nice!!

Leave a Reply