Opened 8 years ago
Last modified 7 years ago
#316 new defect
Kerberos5 support encryption support and NTLMvl1 support checkbox defaults and behavior incorrect
Reported by: | Gregg Young | Owned by: | |
---|---|---|---|
Priority: | major | Milestone: | GUI Tools 1.0.0 |
Component: | Samba Client GUI | Version: | Server 3.6.x |
Keywords: | Cc: |
Description
These are checked by default and should not be. While NTLMv1 does not support kerberos or encryption you can select all 3 together. NTLMv1 should uncheck the other 2 when selected and should be unchecked when one of the others is selected.
Attachments (1)
Change History (6)
comment:1 by , 7 years ago
by , 7 years ago
Attachment: | evfsgui.diff added |
---|
comment:2 by , 7 years ago
This is actually working now (ArcaMapper 2.6 / EVFSGUI trunk), but the checkboxes start out as all checked. Once unchecking all and then checking, say NTLMv1 (on either the popup on the Network neighborhood tab or on the New Resource Advanced tab), the other conflicting options are greyed out.
Unfortunately, however, functionally, these checkboxes do not appear to pass the proper options to NetDrive (according to the debug window output), which should be:
KRB5SUPPORT=0/1 NTLMv1SUPPORT=0/1 ENCRYPTIONSUPPORT=0/1
All three should be passed, and they must not conflict. NTLMv1SUPPORT=1 is required when connecting to an NTLMv1-only host (otherwise, an error 58 will result). Samba 4 will not automatically fall back to NTLMv1 unless explicitly told to do so. When this parameter is missing, the farthest we default to NTLMv2, which is unintelligible to an NTLMv1-only host.
comment:3 by , 7 years ago
Priority: | minor → major |
---|
comment:4 by , 7 years ago
Oddly, I was just able to get these options passed when mapping from the Network neighborhood tab. I had to uncheck all and then check NTLMv1. That same procedure does not seem to get them passed if I map from the New Resource tab.
I found an issue with the variable naming which may be the cause of this. These weren't being added to the ini file either. I don't have VX-Rexx so I couldn't try my fix. I have attached it if anyone would like to try it.