[hylight]

To connect the NT client we not only had to set the encrypt passwords = yes, but we also had to create a smbpasswd file and add user and password information. The correlation between the appleshare/unix and sambas (NT) has to be done manually.
Is there an automatic solution?

After looking at the log.smb file I noticed that the NT client tried to connect with a predefined user, which has nothing to do with the name and passwords provided in the authentication window.

[Scott_H]

I'm going to move this one over to OS X Server Forum. Click through and find the post.

[Brass]

The problem of course stems from the fact that Unix and Windows use different password encryption methods. Whereas Windows used to try its encryption method, and then if that didn't authenticate, it then sent the password in plain text. Since NT 4, this has not been the case by default. However, this can be easily fixed by a simple windows registry edit (see below, also documented on MS web page).

This way, each windows client, when connecting to the samba server, will use that server's built in unix authentication. This way you do not need to maintain any additional password files for Samba - samba just authenticates against the Unix host's authentication.

Note however, that there is yet another annoying bug in Windows NT which can make things a bit confusing at first. Windows NT will only connect to file servers (including samba servers and other Windows NT servers) as the user under which you logged into Windows. Even though the connection dialog box will let you enter another username, it will only actually pass the name which you logged into windows as. This is fixed in windows 2000.

This means that you must log into Windows as the same user as which you want to connect to your Samba share.

The registry edit is also different for Windows 2000 than for Windows NT. The NT version is:

Run regedit

HKEY_LOCAL_MACHINE
SYSTEM
CurrentControlSet
Services
Rdr
Parameters
Edit > New > DWORD Value
Value Name: "EnablePlainTextPassword"
Right Click > Modify > Value Data: "1"

Exit Regedit

Reboot Machine

I don't check this forum often, so email me if you want further clarification.

[This message has been edited by Brass (edited 12-04-2000).]

[BJPirt]

Samba supports encrypted passwords since v2.0 (i think). YOu just need to specify it in the smb.conf file. I have samba on os x where the shares get password verification from the primary domain controller. If you want I can let you have my smb.conf file to take a look at?