Friday 11 October 2013

Windows 7 connecting to Xserver OS X 10.4 probs

Whenever I try to connect to the smb share on the xserver from a windows 7 computer I am unable to authenticate. But I can from Windows XP and Windows 8!

After a quick look I found this helpful post page, specifically the 'Setspn' command. Digging more into it, there is a link which I think is to this page (outdated links). Do a search on this page for "Setspn" and you'll find it detailed there.

It looks like an authentication issue with Kerberos, where it then looks at using NTLMv2 to authenticate.

To solve the problem looks like you need to change the protocol Windows vista and 7 use back to either Kerberos or NTLMv1. To do this, type from the machine:

  1. Click Start.
  2. Type secpol.msc in the search box and press Enter.
  3. Windows Vista will display a warning message; click Continue.
  4. Windows Vista's Local Security Policy console will appear. Highlight Local Policies.
  5. Double-click Security Options.
  6. Scroll down to the Network Security: LAN Manager Authentication Level policy entry and double-click it.
  7. Change the value from the default setting of Send NTLMv2 Response Only to Send LM & NTLM -- Use NTLMv2 Session Security If Negotiated, then click OK. (Figure J).
  8. Close the Local Security Policy console.
I have yet to try this. But will do in the near future.

Or follow this:
C:\ setpn -L yourserver
This gets you a list of the service principals assigned to that computer record:
  • xgrid/yourserver.example.com
  • vpn/yourserver.example.com
  • ipp/yourserver.example.com
  • xmpp/yourserver.example.com
  • cifs/yourserver.example.com
  • host/yourserver.example.com
  • smtp/yourserver.example.com
  • HTTP/yourserver.example.com
  • pop/yourserver.example.com
  • imap/yourserver.example.com
  • ftp/yourserver.example.com
  • afpserver/yourserver.example.com
To add the appropriate record:
C:\setpn -A cifs/yourserver yourserver
This gets you:
  • cifs/yourserver
  • xgrid/yourserver.example.com
  • vpn/yourserver.example.com
  • ipp/yourserver.example.com
  • xmpp/yourserver.example.com
  • cifs/yourserver.example.com
  • host/yourserver.example.com
  • smtp/yourserver.example.com
  • HTTP/yourserver.example.com
  • pop/yourserver.example.com
  • imap/yourserver.example.com
  • ftp/yourserver.example.com
  • afpserver/yourserver.example.com

No comments:

Post a Comment