Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Mac OS X > Do I need UAM when connecting to Windows 2003 Server?

Do I need UAM when connecting to Windows 2003 Server?
Thread Tools
Grizzled Veteran
Join Date: May 2005
Location: Toronto, ON
Status: Offline
Reply With Quote
Jul 6, 2007, 09:20 AM
 
I'm trying to fix a few file sharing issues we were having with a Windows 2003 server. At this point I have the AFP shares working, but I keep reading about needing to install Microsoft UAM on several web sites for some authentication reasons. When I go to the link on MS for UAM (Windows 2000 Network) however, it specifies Windows 2000 Server, and makes no mention of Windows 2003 Server.

Does anyone know if this is something I will need to install on the Apple computers in the office? All of our servers are running Windows 2003 Server. Also, in layman's terms, what does UAM do that makes me need to install it?

Thanks in advance.
MacBook Pro | 2.16 ghz core2duo | 2gb ram | superdrive | airport extreme
iBook G4 | 1.2ghz | 768mb ram | combodrive | airport extreme
iPhone 3GS | 32 GB | Jailbreak, or no Jailbreak
     
P
Moderator
Join Date: Apr 2000
Location: Gothenburg, Sweden
Status: Offline
Reply With Quote
Jul 6, 2007, 09:47 AM
 
Windows uses several different authentication modes for Samba/SMB (ie Windows File Sharing). If the Mac is not connected to Active Directory, Apple by default only supports the oldest one, NTLMv1. That version is very unsafe because of its short keylength, so server administrators like to disable the usage of it if the network is open to non-trusted parties. The MS UAM implements NTLMv2, which has a longer keylength. Haven't used it myself in a few OS X revisions, but itt worked well back when I had reason to use it (10.2 days). Give it a try on a Mac that has problems and see if it helps.

All of this is irrelevant if the Macs are connected to an Active Directory domain. If they are, NTLM is not used at all (authentication is made using Kerberos).
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 01:36 PM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2