Clear text password needed to connect to smb share

Question

Level 1

0 points

Clear text password needed to connect to smb share

At our orginisation, smb only supports authentication using clear text passwords. I know, not a good thing; but I am not the sysadmin and its not my call. I am just the mac support. The apple clients seam to only want to send an encrypted password when connecting to a SMB share. We do not support this. We need to send the SMB password in clear text. Is there anyway to do this besides

smbclient //smbserver.org/username -U username

The go-> connect to server produces this in the logs

Jan 12 09:54:33 /System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent[852]: smb sessionsecurity: Clear text passwords are not allowed!

BTW.. SMB 3.0.20 is the server version running on solaris 10

Mac Pro 8 Core Xeon, Mac OS X (10.5.6)

Posted on Jan 12, 2010 7:02 AM

Reply

Answer 1

etresoft

Level 9

56,662 points

Jan 12, 2010 7:12 AM in response to gibbsj

Try the instructions in this support document.

Reply

Answer 2

gibbsj Author

Level 1

0 points

Jan 12, 2010 7:33 AM in response to etresoft

Nothin.. but at least the password in clear text error is gone from the logs.

Reply

Answer 3

gibbsj Author

Level 1

0 points

Jan 12, 2010 8:07 AM in response to gibbsj

This is what I see in the server logs

[2010/01/12 10:40:01, 2] auth/auth.c:check ntlmpassword(317)
check ntlmpassword: Authentication for user [<E6><89><A9><E7><8D><A2>j<E4><B4><80><E6><8D><A1><E4><BC><A0><E2><81><93><E2>< 81><98><E3><80><B1><E3><98><AE><E5><8C><80><E4><89>
<8D><E5><8D><86><E3><84><A0><E3><98><AE><E3><80><AE>] -> [<E6><89><A9><E7><8D><A2>j<E4><B4><80><E6><8D><A1><E4><BC><A0><E2><81><93><E2>< 81><98><E3><80><B1><E3><98><AE><E5><8C><80>
<E4><89><8D><E5><8D><86><E3><84><A0><E3><98><AE><E3><80><AE>] FAILED with error NT STATUS_NO_SUCHUSER
[2010/01/12 10:40:01, 2] smbd/server.c:exit_server(608)
Closing connections

Reply

Answer 4

etresoft

Level 9

56,662 points

Jan 12, 2010 10:39 AM in response to gibbsj

It looks like you are making it to the server, but it doesn't think you are a valid user. I can't help much at this point. Perhaps it is now just a domain/workgroup forward/backslash issue.

Reply

Answer 5

gibbsj Author

Level 1

0 points

Jan 13, 2010 7:37 AM in response to etresoft

But look at how the username looks. It's not even anything that would make sense. When you login via the command line.. you get user = blah When you login via the go->connect to server.. you get jl>L><:LL< <-- just a bunch of garbage

Reply

Answer 6

etresoft

Level 9

56,662 points

Jan 13, 2010 10:17 AM in response to gibbsj

But you aren't logging in. You are failing to log in. That is a response from the failure. The username is probably hashed. Maybe try logging in from the command line and doing it incorrectly. Try different ways to screw it up and that might help you figure out what you need to do differently from the Finder side.

Reply

Answer 7

gibbsj Author

Level 1

0 points

Jan 13, 2010 1:34 PM in response to etresoft

when I do it with the command line.. it works fine.. even when I screw it up..

Reply