SMB Authentication: The Basics


Message Authentication Codes: Settings

Server:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters
EnableSecuritySignature
The valid values are zero (0) and one (1).
If zero, then MAC signing is disabled on the server side.
If one, then the server will support MAC signing.
RequireSecuritySignature
The valid values are zero (0) and one (1).
This parameter is ignored unless MAC signing is enabled via the EnableSecuritySignature parameter.
If zero, then MAC signing is optional and will only be used if the client also supports it.
If one, then MAC signing is required. If the client does not support MAC signing then authentication will fail.

Client:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rdr\Parameters
EnableSecuritySignature 
The valid values are zero (0) and one (1).
If zero, then MAC signing is disabled on the client side.
If one, then the client will support MAC signing.
RequireSecuritySignature
The valid values are zero (0) and one (1).
This parameter is ignored unless MAC signing is enabled via the EnableSecuritySignature parameter.
If zero, then MAC signing is optional and will only be used if the server also supports it.
If one, then MAC signing is required. If the server does not support MAC signing then authentication will fail.
<Back] SambaXP / April, 2003 [Next>