SLES 10.1 Samba 3.0 unable to confirm encrypt passwords = yes with testparam
 

Hello, I am trying to prove that I have encrypt passwords set to on for our security staff. I know the software default is on

When we set the value in our /etc/samba/smb.conf file to:
encrypt passwords = yes
the testparam command does not show this value in its output. When I issue a testparam command I do not see any values for encrypt . Example follows.

Question #2 is:

If a XP system has the Reg setting -> Microsoft network client: Send unencrypted password to third-part SMB servers is Enabled

What happens when the xp system tries to map the drive, does it try encrypted if unencrypted does not work?

Thanks!
ray




/etc/samba/smb.conf
samba:/etc/samba # cat smb.conf
# Global parameters

[global]
encrypt passwords = Yes
case sensitive = Yes
preserve case = Yes

workgroup = MYGROUP
server string = Samba Server
restrict anonymous=2
log file = /var/log/samba/%m.log
max log size = 5
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
wins support = no

security = user
encrypt passwords = yes
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no
# ray debug
# restrict anonymous=2
# usershare allow guests = Yes



[homes]
comment = Home Directories
writeable = Yes
browseable = No
posix locking = no

--begin cut
--end cut
[dochome]
path = /dochome
writeable = yes
posix locking = no

[wcp]
path = /wcp
writeable = yes
posix locking = no



----------------------------------------

/etc/samba
which testparm
/usr/bin/testparm

testparam

sambasy01exdu:/etc/samba # testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[authext]"
--- begin cut
--end cut
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)

Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
workgroup = MYGROUP
server string = Samba Server
restrict anonymous = 2
log file = /var/log/samba/%m.log
max log size = 5
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
case sensitive = Yes

[homes]
comment = Home Directories
read only = No
browseable = No
posix locking = No

[authext]
path = /authext
read only = No
posix locking = No