AF:
NF:0
PS:10
SRH:1
SFN:
DSR:
MID:<20080320112158.74242a7e@ripper.onstor.net>
CFG:
PT:0
S:andy.sharp@onstor.com
RQ:
SSV:onstor-exch02.onstor.net
NSV:
SSH:
R:<mtracy@css.glasshouse.com>
MAID:1
X-Sylpheed-Privacy-System:
X-Sylpheed-Sign:0
SCF:#mh/Mailbox/sent
RMID:#imap/andys@onstor.net@onstor-exch02.onstor.net/INBOX	0	01f401c88ab5$b6b8b0d0$6a4d7e0a@glasshousetech.com
X-Sylpheed-End-Special-Headers: 1
Date: Thu, 20 Mar 2008 11:22:03 -0700
From: Andrew Sharp <andy.sharp@onstor.com>
To: "Michael Tracy" <mtracy@css.glasshouse.com>
Subject: Re: Mac OS 10.5 SMB Issue
Message-ID: <20080320112203.341488cb@ripper.onstor.net>
In-Reply-To: <01f401c88ab5$b6b8b0d0$6a4d7e0a@glasshousetech.com>
References: <01af01c88ab2$64717cb0$6a4d7e0a@glasshousetech.com>
	<20080320110729.5f7e20ef@ripper.onstor.net>
	<01f401c88ab5$b6b8b0d0$6a4d7e0a@glasshousetech.com>
Organization: Onstor
X-Mailer: Sylpheed-Claws 2.6.0 (GTK+ 2.8.20; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Thu, 20 Mar 2008 14:10:43 -0400 "Michael Tracy"
<mtracy@css.glasshouse.com> wrote:

> Hi Andrew
> Yeah, that's the one answer I knew about
>=20
> domain checkpwd windows ntlm/ntlmv2/krb5 DC user
>=20
> was hoping for the other answers

Oh well, that's the sum total of my knowledge. ~:^)

> Michael
> ----- Original Message -----=20
> From: "Andrew Sharp" <andy.sharp@onstor.com>
> To: "Michael Tracy" <mtracy@css.glasshouse.com>
> Cc: "DL-CStech" <dl-cstech@onstor.com>
> Sent: Thursday, March 20, 2008 2:07 PM
> Subject: Re: Mac OS 10.5 SMB Issue
>=20
>=20
> > On Thu, 20 Mar 2008 13:43:34 -0400 "Michael Tracy"
> > <mtracy@css.glasshouse.com> wrote:
> >
> >> Hi all
> >> 7532 - UCSF
> >>
> >> I know we don't have a Mac Leopard release yet
> >> Do we have a timeline on that?
> >>
> >> Also see below for some new questions and insights into the Mac
> >> world. Any insight into the below is greatly appreciated.
> >>
> >> Michael
> >>
> >>
> >> ----- Original Message -----=20
> >> From: De Leon, Ernest
> >> To: Call Center TSE
> >> Sent: Thursday, March 20, 2008 12:46 PM
> >> Subject: Mac OS 10.5 SMB Issue
> >>
> >>
> >> Fred,
> >>
> >>
> >>
> >> In working on this OS 10.5 Leopard SMB issue, I have a few
> >> questions for you and your engineering staff.  I have been
> >> breaking down the issue for a few days now, and I need to know a
> >> few things:
> >>
> >>
> >>
> >>   1.. Knowing that the Bobcat is a Linux based appliance with a
> >> (probably) custom implementation of Samba server on it, is there a
> >> place where I (or OnStor) can modify the smb.conf file?
> >
> > Onstor appliances are not Linux based.  They are from-scratch
> > proprietary implementations, except for the SSC operating system,
> > which is only used for managment, and is OpenBSD (on Bobcat).
> > Configuration is done through the CLI or the webUI.  There is no
> > smb.conf file.
> >
> >> 2.. With
> >> domain authentication, is the unit using LM, NTLM or NTLMv2?
> >
> > This one gets asked every other week it seems.  I'm guessing a wiki
> > search will answer it pretty fast.
> >
> >> 3.. Is
> >> there a way to modify the response from the LAN Manager
> >> Authentication schema?  (e.g. How would you modify what would be
> >> Local Security Policy =E2=86=92 Local Policies =E2=86=92 Security Opti=
ons =E2=86=92 Change
> >> Network Security: LAN Manager Authentication Level ) 4.. What
> >> version of Samba is your appliance based on?
> >> I have done a series of tests with the Bobcat appliance, a
> >> bona-fide Linux Samba server and several Windows servers.  I have
> >> pinpointed the connectivity issue to Apple=E2=80=99s current (albeit
> >> modified) implementation of Samba 3.0.25b which has several well
> >> known and documented problems.  The most current Samba version
> >> (3.0.28a) along with the five intermediary version updates address
> >> many of these problems having to do with windows authentication,
> >> NT status codes, winbindd, DFS traversal, trusted DC
> >> communication, SMB signing, uid and gid inheritance, and NTLMv2
> >> hash generation.  I will be doing some more testing from the
> >> client side (most likely modifying/patching Apple=E2=80=99s broken Sam=
ba
> >> package), but there are a few tweaks that I have gotten to work on
> >> Windows servers and Linux Samba servers which may be able to be
> >> applied on the NAS.  Please respond with as many answers as you
> >> can give, and/or feel free to pass this on to your engineering
> >> department to fill in the rest (if there is any.)  Your engineers
> >> can also contact me directly at this email address if they have
> >> any questions or want to discuss something in more detail.
> >>
> >>
> >>
> >> Thanks,
> >>
> >>
> >>
> >> Ernest de Leon
> >>
> >> Systems Engineer
> >>
> >> UCSF Dean=E2=80=99s Office
> >>
> >> 3333 California St., Suite 109
> >>
> >> San Francisco, CA 94118
> >>
> >> 415-476-3318
> >>
> >> deleone@medsch.ucsf.edu
> >>
> >>
> >=20
>=20
>=20
