flur

Q: Yosemite SMB from XP/Win8

I am unable to connect to the SMB share on my newly upgraded Yosemite machines from a Windows client.   I could connect fine in Mavericks.   I can connect fine via smbclient on a linux machine.  

 

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: uid=0

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: od failed with 2 proto=lm

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: user=\

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: kdc failed with -1561745597 proto=unknown

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request guest: ok user=ORCHARD\GUEST proto=lm flags: NEG_KEYEX, ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM2, NEG_ALWAYS_SIGN, NEG_ANONYMOUS, NEG_NTLM, NEG_SIGN, NEG_TARGET, NEG_UNICODE

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: uid=0

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: init request

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: init return domain: ORCHARD server: ORCHARD indomain was: <NULL>

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: uid=0

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: init request

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: init return domain: ORCHARD server: ORCHARD indomain was: <NULL>

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: uid=0

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: od failed with 2 proto=ntlmv1-with-v2-session

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: user=EEEPC\flur

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: kdc failed with -1561745600 proto=ntlmv1

Oct 20 12:19:34 orchard.lan digest-service[1173]: digest-request: guest failed with -1561745590 proto=ntlmv1-with-v2-session

Posted on Oct 20, 2014 9:21 AM

Close

Q: Yosemite SMB from XP/Win8

  • All replies
  • Helpful answers

Page 1 Next
  • by rebelscum75,

    rebelscum75 rebelscum75 Oct 22, 2014 7:46 AM in response to flur
    Level 1 (0 points)
    Oct 22, 2014 7:46 AM in response to flur

    Could you try (a) turn samba off and on again in sharing

    or (b) change the local security policy on your PC. (borrowed from here http://www.jimmah.com/vista/net/ntlm.aspx)

    1. Click Start
    2. Click Control Panel
    3. Click System and Maintenance
    4. Click Administrative Tools
    5. Double-Click Local Security Policy
    6. In the left pane, click the triangle next to Local Policy
    7. In the left pane, click Security Options
    8. In the right pane near the bottom, double-click "Network security: LAN manager authentication level"
    9. Click the drop-down box, and click "Send LM & NTLM - use NTLMv2 session security if negotiated"
    10. Click OK
  • by Tim Shouse,Helpful

    Tim Shouse Tim Shouse Oct 27, 2014 12:13 PM in response to rebelscum75
    Level 1 (10 points)
    Oct 27, 2014 12:13 PM in response to rebelscum75

    I stumbled across this thread today...I have had the same issue. My virtual XP machine runs inside VMWare Fusion on a Mac mini. My file server is a Mac Pro. Recently upgraded everything to Yosemite and my Fusion to 7.0 and suddenly XP won't authenticate to the Mac Pro. The password prompt just resets itself over and over like the password is wrong.

     

    So tried Rebel's advice and it didn't make a difference. So I decided to play for a minute. By changing the LAN Manager authentication level to "Send NTLMv2 response only", magically everything now works as it should! Thanks!

  • by georg234,

    georg234 georg234 Oct 28, 2014 5:42 AM in response to Tim Shouse
    Level 1 (0 points)
    Oct 28, 2014 5:42 AM in response to Tim Shouse

    I had a similar problem. could not access yosemite shares from my development windows 2008 r2 servers windows 7/8 clients were ok though.

    after changing the policy from "Send LM & NTLM - use NTLMv2 session security if negotiated" to "Send NTLMv2 response only" it magically worked - like Tim described it

     

    Thanks,

    Georg

  • by mackib,

    mackib mackib Oct 28, 2014 11:27 AM in response to Tim Shouse
    Level 1 (0 points)
    Oct 28, 2014 11:27 AM in response to Tim Shouse

    I've been pulling my hair out over this issue Tim is the man it works perfectly !!

  • by DW1001,

    DW1001 DW1001 Oct 28, 2014 7:16 PM in response to flur
    Level 1 (5 points)
    Oct 28, 2014 7:16 PM in response to flur

    It work for me too ! Great !

  • by s2000man1,

    s2000man1 s2000man1 Nov 5, 2014 10:49 AM in response to rebelscum75
    Level 1 (0 points)
    Nov 5, 2014 10:49 AM in response to rebelscum75

    Do you know of a related solution for XP Home Edition versions?

  • by s2000man1,

    s2000man1 s2000man1 Nov 8, 2014 7:39 AM in response to s2000man1
    Level 1 (0 points)
    Nov 8, 2014 7:39 AM in response to s2000man1

    I found it.  It requires a direct registry edit:  Start -> Run -> regedit.

    Change the value of the following key from 0 to 3:  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Imcompatibilitylevel

  • by Greg Filak,

    Greg Filak Greg Filak Nov 12, 2014 1:31 PM in response to rebelscum75
    Level 1 (5 points)
    Nov 12, 2014 1:31 PM in response to rebelscum75

    In XP Pro SP3 it's: (other versions will be slightly different)

    • Start
    • Control Panel
    • Administrative Tools
    • Local Security Policy

    Then

    • Left pane expand Local Policies
    • Left pane click Security Options
    • Right pane double click Network Security: LAN Manager authentication Level

    Then

    • In dropdown select Send NTLMv2 response only
    • Click Apply

     

    On the Yosemite (10.10) side:

    • Apple Menu
    • System Preferences
    • Sharing

    Then

    • Left pane tick box for File Sharing
    • Right side click Options

    Then

    • Tick box for Share Files And Folders Using SMB
    • Under Windows File Sharing the accounts you want to be able to access files
    • Click Done

     

    You should now be able to log in to access files on your Mac from your XP machine. This worked for me I hope it does as well for you.

    EG

  • by jminnis,

    jminnis jminnis Nov 13, 2014 1:54 PM in response to georg234
    Level 1 (0 points)
    Nov 13, 2014 1:54 PM in response to georg234

    I just upgraded to Yosemite and one of my Windows 7 clients could not logon no matter what I tried.

    "changing the policy from "Send LM & NTLM - use NTLMv2 session security if negotiated" to "Send NTLMv2 response only" it magically worked - like Tim described it" worked for me! 2 days l will never get back.

    Thanks, Tim and Georg!

  • by curve_geek,

    curve_geek curve_geek Dec 2, 2014 3:31 PM in response to s2000man1
    Level 1 (0 points)
    Dec 2, 2014 3:31 PM in response to s2000man1

    Goodness knows how I eventually came across this, after tearing my hair out but it worked!! thanks a mil.

  • by dbabette,

    dbabette dbabette Dec 2, 2014 5:24 PM in response to Tim Shouse
    Level 1 (0 points)
    Dec 2, 2014 5:24 PM in response to Tim Shouse

    Amazing!

    Worked for me too. A tip of the hat to Tim!

  • by Emmeline Media,

    Emmeline Media Emmeline Media Dec 22, 2014 3:27 AM in response to dbabette
    Level 1 (0 points)
    Dec 22, 2014 3:27 AM in response to dbabette

    As little as I understand about the problem and its mechanics, I can tell you this fix worked for me in Win 7 pro, in a simple wi-fi home sharing set-up comprising a Dell laptop and a Macbook Pro running Yosemite. Thanks Tim

  • by heryien,

    heryien heryien Jan 1, 2015 4:35 PM in response to Tim Shouse
    Level 1 (4 points)
    Apple TV
    Jan 1, 2015 4:35 PM in response to Tim Shouse

    Yes, Tim's solution just works.

    Thanks!

  • by NaseerKhan,

    NaseerKhan NaseerKhan Jan 4, 2015 11:16 PM in response to flur
    Level 1 (10 points)
    Jan 4, 2015 11:16 PM in response to flur

    I had Vista Home Premium, W7 Home Premium, W7 Pro all not working with my recently upgraded Mac Pro.  None of the suggestions about changing the Local Security Policy worked, whether via RegEdit or GUI.

     

    When I installed Yosemite, somewhere along the way, it offered to use my iCloud password as my machine password.  I chose that option, and that was the cause of my troubles.  The share from iMac (also with Yosemite) is working fine with these same systems.  Once I remembered that difference and put it back to a separate system password for the Mac Pro, all Windows machines can access the shares from it.

     

    BTW, that Lsa setting was actually undefined in my W7 machines, meaning not set.  And on Vista Home, it needs to be a 3 (which is what it was to start).

     

    Nice way to kill a few hours... =:-o :-\

Page 1 Next