Connecting to Samba from Vista RC1
One of the things that is annoying me about Vista is that I can’t
connect to my SMB shares on my Mac. When I try to log in, it rejects my
password. I looked at /var/log/samba/log.smbd on my Mac, and here’s
what I saw:
[2006/09/21 13:55:45, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312)
User "bjepson" failed to authenticate with
"dsAuthMethodStandard:dsAuthNodeNTLMv2" (-14090)
So I poked around the Group Policy Edit (type gpedit.msc into the
search or address box and press enter). I drilled down into:
Local Computer Policy
-> Computer Configuration
-> Windows Settings
-> Security Settings
-> Local Policies
-> Security Options
and I changed “Network security: LAN Manager authentication level” to
“Send LM & NTLM - use NTLMv2 session security if negotiated” and it
seems to work.
September 30th, 2006 at 5:55 am
Ah! Many thanks for this - I’ve been struggling with this all week
October 6th, 2006 at 8:22 pm
Instead of lowering your security posture on Vista, why not configure your Mac to properly support NTLMv2?
http://www.imss.caltech.edu/cms.php?op=wiki&wiki_op=view&id=337
http://www.microsoft.com/mac/otherproducts/otherproducts.aspx?pid=windows2000sfm
October 7th, 2006 at 8:45 am
Thanks, Chris. I didn’t know that Microsoft distributed client bits for Services for Mac. What I’m trying to do is connect from Windows to a Mac Samba server, though. Since this is a client authentication module for the Mac, I’m not sure how it would integrate with the Samba server on the Mac.
October 11th, 2006 at 10:21 am
Thank you very much, sir. I’ve been itching to hack around on Vista, but I’m a Mac guy too, so ran into this problem within moments of getting a Vista machine built. Problem solved.
Thanks again.
October 22nd, 2006 at 3:26 am
Thanks! You nailed it. I.ve been trying to connect to a Samba server on a suse 9.0 virtual machine running under vista rc1
November 22nd, 2006 at 11:52 am
Worked like a charm, thnx.
December 12th, 2006 at 10:45 am
Thanks a ton, it’s to bad “our friends” at M$ don’t make things like this easier.
February 26th, 2007 at 10:39 pm
Many thanks - worked a charm here connecting to Mac OS X Server 10.3.9. Saved me hours!!
March 5th, 2007 at 9:56 am
“Brilliant!” i thought to myself as I came across this page.
“Blast!” i thought to myself as I reaslised my crappy work computer has Vista Home installed and apparently no gpedit.msc.
Any ideas on how to achieve a similar result on Vista Home?
March 13th, 2007 at 9:03 pm
Paul,
Start up regedit and change this value:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LMCompatibilityLevel from a 3 to a 1
March 17th, 2007 at 6:58 am
Thanks Yvo!
Worked perfectly once I’d made the change as you described.
Paul
April 23rd, 2007 at 12:20 pm
Thanks so much! Worked like a charm! Saved me tons of looking, as our whole company is switching to Vista and I had to figure out how to get it to work
. Thanks again!
May 1st, 2007 at 2:33 am
thanks tons for this. nice!!