Win 2k8 with Shared Folders accessing with Linux

[acent]

Greetings,

I've spent a long time trying to figure this out and am left with nothing but stress. It is kind of embarrassing, but here goes:

I'm consulting to a company with:
- Win 2k8 R1 32bit Server (Jack of all trades- DC, DNS, DHCP, File, Print)
- Win 7 Pro 64 bit clients

The network is fine and we're all fat dumb and happy.

I'm trying to access a shared folder on the server with my Linux (openSuSE 11.4) laptop. This computer is not part of the domain, nor does it want to be. I connect to the VPN to get to the network.

From what I can tell (and I've done this with other networks) I should be able to get to the share via:

smbclient //x.x.x.x/Share -U user -W domain

However, when I do so, I get

session setup failed: NT_STATUS_LOGON_FAILURE

I figure this has to be a mod to the group policy in how authentication happens, but I can't find it.

Thanks, in advance for help.

"Nothing is so common-place as the wish to be remarkable."
--Shakespear

 

[kmcferrin]

If everything is working correctly on the Windows side (clients and servers) then you may need to consult a Linux forum.

Although...have you ever been able to make this work on a Windows 2008 server before? I believe that by default Vista and Server 2008 utilize SMB 2.0, and your Linux-based SMB client may need to be updated or configured differently to support SMB 2.0. Also, be on the lookout for SMB 2.2 in Windows 8 when it ships (probably next year).

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator

 

[acent]

Thank you for the response. I did some checking and I think you're on the right track with the SMB 2.0 causing me problems.

I will see if I can disable it and test.

"Nothing is so common-place as the wish to be remarkable."
--Shakespear

 

[acent]

For those interested, I was able to find a solution. I edited the GP for the Domain Controller and changed the following Setting:

Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Network Security: LAN Manager Authentication Level

Then set that to:
Send NTLMv2 response only / Refuse LM

"Nothing is so common-place as the wish to be remarkable."
--Shakespear