Vihren Todorov
Cadet
- Joined
- Mar 10, 2017
- Messages
- 3
the freenas device does not have the directory services running.
AD Functional level is also 2012
AD Functional level is also 2012
Can confirm "ntlm auth = yes" aux params solved this problem for me.Thanks for this! Same problem solved by the "ntlm auth = yes" aux params. Whew.
Do you have any 3rd party security software on the main computer? I'm wondering if some software isn't forcing downgrade to ntlmv1. Got the attention of the Russian mafia perhaps? Is one a WiFi link and others wired?Thanks anodos. "ntlm auth = yes" aux params solved this problem for me too. Weird problem though. My win 7 machines had no problem. 3 win 10 machines had no problem. However my main win 10 machine that i use everyday would not connect no matter what I tried until your post. Seems maybe related to what updates are on our windows machines. just a guess i didn't compare that.
An alternative to forcing FreeNAS (Samba) into using NTLMv1 is to allow Windows 7 (10 as well?) to negotiate more options. You can do this by removing the LmCompatibilityLevel registry key. To do this delete the regkey entry (DWORD) LmCompatibilityLevel under HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\Control\Lsa and reboot.
Out of curiosity, what level was LmCompatibilityLevel set to? By default Windows > Vista should be at a minimum of 3.Had similar problem, followed quoted procedure, back in action. Thanks DSN for pointing this out.
I'd like to add to this that we are also seeing this. Adding ntlm auth - yes fixes the issue.
I checked our security policy and it is currently set to "Send LM & NTLM - use NTLMv2 Session Security if Negotiated" which one would think equates to if NTLMv2 is allowed, use that. However, if I configure the policy to "Send MTLMv2 response only" then everything works as expected.
We cannot leave the policy at that level because there are some ancient machines running jobs out here that we can't just cut off.
Is this all expected behavior? Or is something in FreeNAS not right?
Running Build FreeNAS-9.10.2-U3 (e1497f269) By the way. Clients are a combination, but Windows 10 and Server 2012R2 are among them.
Thanks,