The Dumbing Down of Windows XP SP2 - SMB

This is a discussion on The Dumbing Down of Windows XP SP2 - SMB ; Hi, Certain network setups do not need the tremendous ammo of Windows XP Security burried inside Service Pack 2. It seems that XP SP2 cannot perform browsing and access windows shares the old fashioned way in WORKGROUP mode only. To ...

+ Reply to Thread
Results 1 to 6 of 6

Thread: The Dumbing Down of Windows XP SP2

  1. The Dumbing Down of Windows XP SP2


    Hi,

    Certain network setups do not need the tremendous ammo of Windows XP
    Security burried inside Service Pack 2. It seems that XP SP2 cannot
    perform browsing and access windows shares the old fashioned way in
    WORKGROUP mode only. To see the problem in action see
    http://crashrecovery.org/xpsp2/

    Is there any smart way to Dumb Down Windows XP SP2 to allow WORKGROUP mode
    operation only ?

    Robert
    --
    Robert M. Stockmann - RHCE
    Network Engineer - UNIX/Linux Specialist
    crashrecovery.org stock@stokkie.net


  2. Re: The Dumbing Down of Windows XP SP2

    On Sat, 05 Feb 2005 03:47:44 +0100, Robert M. Stockmann wrote:

    >
    > Hi,
    >
    > Certain network setups do not need the tremendous ammo of Windows XP
    > Security burried inside Service Pack 2. It seems that XP SP2 cannot
    > perform browsing and access windows shares the old fashioned way in
    > WORKGROUP mode only. To see the problem in action see
    > http://crashrecovery.org/xpsp2/
    >
    > Is there any smart way to Dumb Down Windows XP SP2 to allow WORKGROUP mode
    > operation only ?
    >

    or should i get a Mac ? :

    http://sfgate.com/cgi-bin/article.cg...otes020405.DTL

    --
    Robert M. Stockmann - RHCE
    Network Engineer - UNIX/Linux Specialist
    crashrecovery.org stock@stokkie.net


  3. Re: The Dumbing Down of Windows XP SP2


    "Robert M. Stockmann" wrote in message
    newsan.2005.02.05.02.47.44.880573@stokkie.net...
    >
    > Hi,
    >
    > Certain network setups do not need the tremendous ammo of Windows XP
    > Security burried inside Service Pack 2. It seems that XP SP2 cannot
    > perform browsing and access windows shares the old fashioned way in
    > WORKGROUP mode only. To see the problem in action see
    > http://crashrecovery.org/xpsp2/
    >
    > Is there any smart way to Dumb Down Windows XP SP2 to allow WORKGROUP mode
    > operation only ?


    I'm not sure if I understand your problem but I'm running a samba server
    over 2 IP subdomains and in one subdom (the "students") it is running as an
    authentication "domain" (PDC) server for the students domain and in the
    other IP subdomain (users) it is just running as a dumb workgroup member aka
    no user authentication against the domain is needed) ..



  4. Re: The Dumbing Down of Windows XP SP2

    On Sat, 05 Feb 2005 03:47:44 +0100, Robert M. Stockmann wrote:


    > Hi,
    >
    > Certain network setups do not need the tremendous ammo of Windows XP
    > Security burried inside Service Pack 2. It seems that XP SP2 cannot
    > perform browsing and access windows shares the old fashioned way in
    > WORKGROUP mode only. To see the problem in action see
    > http://crashrecovery.org/xpsp2/
    >
    > Is there any smart way to Dumb Down Windows XP SP2 to allow WORKGROUP
    > mode operation only ?
    >


    I found the problem, and indeed a simple registry patch called
    Win2003_AllowNonSMBSign.reg is able to solve this problem.

    Win2003_AllowNonSMBSign.reg :

    REGEDIT4

    ; Disable SMB signing. SMB signing is strong authentication for SMB/CIFS;
    ; unfortunately Samba-TNG does not support it at this time. Thus this
    ; patch is necessary on Windows Server 2003, and possibly future service
    ; packs of Windows XP - otherwise rpcclient and smbclient can'tcommunicate
    ; with them.
    ; Thanks to Volker Lendecke for the information.

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters]
    "requiresecuritysignature"=dword:0

    This patch is to be applied on your XPSP2 to connect with a older samba
    server. In fact it _will_ speed up your SMB network speed considerably. No
    security signing mismatch handshakes are needed anymore.

    The following adjustments are needed inside any samba 2.0.x or 2.2.x
    version :


    1. Use : security = user
    2. Use : encrypt passwords = yes
    smb passwd file = /etc/samba/smbpasswd
    3. Make sure a working /etc/samba/smbpasswd exists and has working
    password hashes:

    # cd /etc/samba
    # mksmbpasswd.sh < /etc/passwd > smbpasswd
    # smbpasswd stock

    For the end-result checkout this page http://crashrecovery.org/xpsp2/
    Happy Samba-ing again

    --
    Robert M. Stockmann - RHCE
    Network Engineer - UNIX/Linux Specialist
    crashrecovery.org stock@stokkie.net

  5. Re: The Dumbing Down of Windows XP SP2


    "Robert M. Stockmann" wrote in message
    newsan.2005.02.05.23.55.16.33684@stokkie.net...
    > On Sat, 05 Feb 2005 03:47:44 +0100, Robert M. Stockmann wrote:
    >
    >
    >> Hi,
    >>
    >> Certain network setups do not need the tremendous ammo of Windows XP
    >> Security burried inside Service Pack 2. It seems that XP SP2 cannot
    >> perform browsing and access windows shares the old fashioned way in
    >> WORKGROUP mode only. To see the problem in action see
    >> http://crashrecovery.org/xpsp2/
    >>
    >> Is there any smart way to Dumb Down Windows XP SP2 to allow WORKGROUP
    >> mode operation only ?
    >>

    >
    > I found the problem, and indeed a simple registry patch called
    > Win2003_AllowNonSMBSign.reg is able to solve this problem.
    >
    > Win2003_AllowNonSMBSign.reg :
    >
    > REGEDIT4
    >
    > ; Disable SMB signing. SMB signing is strong authentication for SMB/CIFS;
    > ; unfortunately Samba-TNG does not support it at this time. Thus this
    > ; patch is necessary on Windows Server 2003, and possibly future service
    > ; packs of Windows XP - otherwise rpcclient and smbclient can'tcommunicate
    > ; with them.
    > ; Thanks to Volker Lendecke for the information.
    >
    > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters]
    > "requiresecuritysignature"=dword:0
    >
    > This patch is to be applied on your XPSP2 to connect with a older samba
    > server. In fact it _will_ speed up your SMB network speed considerably. No
    > security signing mismatch handshakes are needed anymore.
    >
    > The following adjustments are needed inside any samba 2.0.x or 2.2.x
    > version :
    >
    >
    > 1. Use : security = user
    > 2. Use : encrypt passwords = yes
    > smb passwd file = /etc/samba/smbpasswd
    > 3. Make sure a working /etc/samba/smbpasswd exists and has working
    > password hashes:
    >
    > # cd /etc/samba
    > # mksmbpasswd.sh < /etc/passwd > smbpasswd
    > # smbpasswd stock
    >
    > For the end-result checkout this page http://crashrecovery.org/xpsp2/
    > Happy Samba-ing again
    >
    > --
    > Robert M. Stockmann - RHCE
    > Network Engineer - UNIX/Linux Specialist
    > crashrecovery.org stock@stokkie.net


    You must be using Samba2.2 because Samba3.0 does support SMB signing. I have
    used the XP SP2 client on 3.0 and I did not have to do the registry tweak.
    On 2.2, it was necessary.



  6. Re: The Dumbing Down of Windows XP SP2

    On Mon, 07 Feb 2005 16:16:42 +0000, punk-tilous wrote:

    >>
    >> For the end-result checkout this page http://crashrecovery.org/xpsp2/
    >> Happy Samba-ing again
    >>

    >
    > You must be using Samba2.2 because Samba3.0 does support SMB signing. I have
    > used the XP SP2 client on 3.0 and I did not have to do the registry tweak.
    > On 2.2, it was necessary.



    Yes indeed... samba 2.2.8 actually. its a quick hack, but gives some SMB
    network speed back. And no need to build samba3.0.x on that older machine.

    --
    Robert M. Stockmann - RHCE
    Network Engineer - UNIX/Linux Specialist
    crashrecovery.org stock@stokkie.net


+ Reply to Thread