OS X Server 10.4 and Vista authentication issue (NTLM v2)
Just thought I'd mention this to see if anyone can shed some more light on it. Recently, two members of my group upgraded their laptops to Vista. After doing so they could no longer connect to my OS X Server which uses our Active Directory to do authentication. One of the PC techs here looked into it and found a way to get it working again:
[quote]Vista is using Network Lan Manager v2, which is more secure but does seem to be incompatible with Mac shares.
Try going to
Control Panel->System Maintenance->Administrative Tools->Local Security Policies
Then navigate to
Local Policies->Security Policies->Network Security: LAN Manager authentication level Properties
Change the local security setting from:
Send NTLM response
to:
Send LM and NTLM response
[/quote]
I asked him for some clarification and he said that apparently Vista is defaulting to only using NTLM v2 which uses stronger encryption on the password that it sends during authentication. He thinks OS X Server is unable to decrypt it so that when it compares it to the password that it's getting from Active Directory they don't match. His suggestion changes Vista's settings to have it also use a less secure encryption which is what OS X Server supports.
Is this a known issue between OS X Server 10.4 and Vista? Is there something I can change in my server configuration so that Vista users don't have to change their settings to connect to my server?