Questions on SMB

Question

Hello!

While investigating the problem with accessing samba share on Debian11 I was puzzled by the following: even after setting LmCompatibilityLevel to 5 (NTLMv2 only) my client Win10 computer still advertises NT LM 0.12 (SMB1)

Q1: Is it normal that NT LM 0.12 (SMB1) is still displayed in Requested Dialects for a) any Win10 b) for Win10 with LmCompatibilityLevel = 5?

Q2: Is it possible to have NTLMv2 with SMB1 ?

Q3: Could anyone please suggest why the correct login\password does not work when connecting from Win10 to debian11 samba share (that same login-password does work from the othe debian server)?

Thank you in advance
Michael

Answer 1

Q1: It is normal for Windows 10 to advertise support for SMB1 in the Requested Dialects field, even if the LmCompatibilityLevel is set to 5. This is because Windows 10 supports SMB1 in addition to newer versions of the SMB protocol.

Q2: Yes, it is possible to use NTLMv2 authentication with SMB1.

Q3: There could be several reasons why the correct login and password is not working when connecting from a Windows 10 computer to a Debian 11 Samba share.

If you are receiving an "nt_status_wrong_password" error when trying to access a Samba share, it means that the username and password combination you are using is incorrect. Make sure that you are using the correct username and password, and double-check to make sure that they are being entered correctly.

If you are certain that the username and password are correct, it is possible that there is an issue with the Samba configuration on the server. Make sure that the user account that you are trying to use has been set up correctly on the server, and that it has the necessary access rights to connect to the share.

It is also worth checking the logs on the server and on the client to see if there are any clues about what might be causing the problem. The logs may contain more detailed information about the error, which can help you to troubleshoot the issue.

Answer 2

Thank you, TechLife!

1) "This is because Windows 10 supports SMB1 in addition to newer versions of the SMB protocol." - ???

SMBv1 is not installed by default in Windows 10 version 1709, Windows Server version 1709 and later versions

3) "If you are receiving an "nt_status_wrong_password" error when trying to access a Samba share, it means that the username and password combination you are using is incorrect." - they are 100% correct and there are plenty of the same issues reported exactly when the password is correct - the problem is I can't see any error in the Samba config - it's configured according to the textbook... :((

Happy New Year!

Regards,
Michael