Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[Samba] Access to Samba-Shares with "sign communications = mandatory"

637 views
Skip to first unread message

d.gut...@gmx.net

unread,
Mar 4, 2013, 5:10:01 AM3/4/13
to
Hello Samba-Specialists,

which smb.conf-options do I have to set to get access to a Samba-Share from a Windows7-Machine, if the Windows7-Machine is very restrictive configured regarding 'smb-signing'?

Windows7-Configuration:
Microsoft network client: Digitally sign communications (if server agrees): Enabled
Microsoft network client: Digitally sign communications (always): Enabled
Microsoft network server: Digitally sign communications (if client agrees): Enabled
Microsoft network server: Digitally sign communications (always): Enabled

The following Settings in smb.conf does not work :-(
server signing = mandatory
client signing = mandatory
server schannel = auto
client schannel = auto

Thanks in advance.

Rgds
Dieter
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Jeremy Allison

unread,
Mar 4, 2013, 3:50:02 PM3/4/13
to
On Mon, Mar 04, 2013 at 11:01:04AM +0100, d.gut...@gmx.net wrote:
> Hello Samba-Specialists,
>
> which smb.conf-options do I have to set to get access to a Samba-Share from a Windows7-Machine, if the Windows7-Machine is very restrictive configured regarding 'smb-signing'?
>
> Windows7-Configuration:
> Microsoft network client: Digitally sign communications (if server agrees): Enabled
> Microsoft network client: Digitally sign communications (always): Enabled
> Microsoft network server: Digitally sign communications (if client agrees): Enabled
> Microsoft network server: Digitally sign communications (always): Enabled
>
> The following Settings in smb.conf does not work :-(
> server signing = mandatory
> client signing = mandatory
> server schannel = auto
> client schannel = auto

That should work. How does it fail ?

Dieter Guthmann

unread,
Mar 5, 2013, 3:10:01 AM3/5/13
to
Hello Jeremy,

> > The following Settings in smb.conf does not work :-(
> > server signing = mandatory
> > client signing = mandatory
> > server schannel = auto
> > client schannel = auto

> That should work. How does it fail ?

I get Errorcode 0x80070043 on Windows7 while accessing.

I want to configure an "Open" Samba-Server - all users on that network should be able to write on all shares.
So I've configured the following:
/etc/samba/smb.conf:
[global]
      workgroup = Arbeitsgruppe
      security = user
      map to guest = Bad Password
      guest account = guest
      username map = /etc/samba/usermap
      server signing = auto
      client signing = auto


      server schannel = auto
      client schannel = auto

      browseable = yes
      load printers = no
      local master = no
      dns proxy = no
      passdb backend = smbpasswd

/etc/samba/usermap
guest = *

Now I've found a hint that Samba does not support signing, if a "guest" want to access.
Is that true? Is there a way to configure a comfortable "public-accessible" Samba-Server without the need to enter a username or a password while accessing?
Thanks in Advance.

Best Regards
Dieter

0 new messages