Windows 2000 and XP have a feature called "digital signing":
, which is apparently turned on if the server is functioning as a domain controller.
Samba and other non-Microsoft SMB products don't support this yet, though Samba does have it in the 3.0.0 beta: https://us1.samba.org/samba/whatsnew/samba-3.0.0beta3.html.
As you would expect, if this feature is left turned on, you aren't going to be able to browse to that server with Samba, Visionfs or any other SMB product until the product is updated for this ability. You'll get "tree connect failed" and Access denied messages.
If you aren't exposing SMB traffic to the Internet, and aren't trying to protect against malicious users on your own network, turning this off isn't going to hurt anything. As Windows allows you to configure this setting for a specific computer, you can fine tune this to meet your exact needs.
Got something to add? Send me email.
More Articles by Tony Lawrence © 2011-06-24 Tony Lawrence