APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

Windows Server Digital Signing

Fri Aug 15 10:08:11 GMT 2003

Windows 2000 and XP have a feature called "digital signing":

Technet Article on Digital Signing of SMB packets

, which is apparently turned on if the server is functioning as a domain controller.

Samba and other non-Microsoft SMB products don't support this yet, though Samba does have it in the 3.0.0 beta: http://us1.samba.org/samba/whatsnew/samba-3.0.0beta3.html.

As you would expect, if this feature is left turned on, you aren't going to be able to browse to that server with Samba, Visionfs or any other SMB product until the product is updated for this ability. You'll get "tree connect failed" and Access denied messages.

If you aren't exposing SMB traffic to the Internet, and aren't trying to protect against malicious users on your own network, turning this off isn't going to hurt anything. As Windows allows you to configure this setting for a specific computer, you can fine tune this to meet your exact needs.



Got something to add? Send me email.





(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> -> Windows Server Digital Signing



Increase ad revenue 50-250% with Ezoic


More Articles by

Find me on Google+

© Tony Lawrence



Kerio Samepage


Have you tried Searching this site?

Unix/Linux/Mac OS X support by phone, email or on-site: Support Rates

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us