samba and microsoft network client digitally sign communications (always)

ron7000 · 02-23-2015, 07:55 AM

in windows 7 local security policy security options, there is
microsoft network client - digitally sign communications (always) = enabled.

when you set that to enabled, a windows 7 client cannot connect to a samba share. is there a way to make samba work with that setting enabled?
Can someone explain technically why it does not work with it enabled?
this is with samba version 3.6 that is in SLES 11.3.
I'm wondering if i put the latest samba 4.1.6 on the system if that then works with the digitally sign always = enabled.

Robert_Webb · 02-24-2015, 02:28 AM

Quote:

Originally Posted by ron7000

in windows 7 local security policy security options, there is
microsoft network client - digitally sign communications (always) = enabled.

when you set that to enabled, a windows 7 client cannot connect to a samba share. is there a way to make samba work with that setting enabled?
Can someone explain technically why it does not work with it enabled?
this is with samba version 3.6 that is in SLES 11.3.
I'm wondering if i put the latest samba 4.1.6 on the system if that then works with the digitally sign always = enabled.

Hi Ron,

I had Samba networked from Linux connected to a Windows Server 2012 in lab last year. I have lots of researched dedicated to having Linux networked with Windows machines. I have this link I have included that may be of some help. But if thus doesn't cover the topic, I will do my best to find the rest of the research I have to share with you. I hope this helps, & feel free to comment, & or message me.

Sincerely,
Robert

https://www.linux.com/learn/tutorial...sy-samba-setup

ron7000 · 02-24-2015, 10:18 AM

thanks for the link, but unfortunately it mentions nothing about
"microsoft network client - digitally sign communications (always) = enabled"
and why that security policy in windows causes problems.
All i've really found was microsoft bulletins saying how that setting is defaulted to and recommended to be disabled.

if you do have info on this, please send it to me. thanks.