PSS ID Number: 296605
Article Last Modified on 12/3/2003
The information in this article applies to:
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
This article was previously published under Q296605
SYMPTOMS
When you try to use your Windows 2000-based computer to obtain access to shared resources on a DEC Pathworks VAX computer or another, older third-party SMB server, you may be unable to do so. For example, when you try to use these shared resources, you may be prompted for credentials, provide them and click OK, only to be repeatedly prompted for credentials. However, you may be able to use a Microsoft Windows NT-based computer to obtain access to these shared resources. You may also be able to use your Windows 2000-based computer to obtain access to shared resources on a newer third-party SMB-capable server, such as a UNIX workstation that is running SAMBA services. Note that this issue can occur even if your LANMAN authentication level is set correctly and you have followed all of the steps that are listed in the following Microsoft Knowledge Base article:
244627 How to Send Unencrypted Passwords to Connect Windows 2000 Systems to Third-Party SMB Servers
CAUSE
This issue can occur if the third-party SMB server requires support for the Microsoft Networks version 1.03 dialect. Windows 2000 no longer provides support for this dialect, although Windows NT 4.0 does. Certain versions of DEC Pathworks negotiate to Microsoft Networks version 1.03 when you are using Windows NT 4.0. In Windows 2000 this dialect has been removed and DEC Pathworks falls back to the PC Network program version 1.0. PC Network version 1.0 does not support user-level security, so the connection does not work.
RESOLUTION
To work around this issue, upgrade the SMB server to a version that is capable of negotiating a supported dialect. Other dialects that are supported by Windows 2000 include:
- LANMAN version 1.0
- Windows For Workgroups version 3.1a
- LM version 1.2X002
- LANMAN version 2.1
- NT LM version 0.12
MORE INFORMATION
A network trace of a connection attempt from the Windows 2000-based client to the DEC Pathworks server proceeds as follows:
- The session set up request is sent from the Windows 2000-based client to the DEC Pathworks server. Windows 2000 passes dialect 5, which means that all of the dialects that are listed in the "Resolution" section of this article are understood.
- The DEC Pathworks server responds with dialect zero because the only dialect that is available to it is PC Networks 1.0. A comparative trace of a connection from a Windows NT 4.0-based computer shows that the DEC Pathworks server negotiates dialect 2, which is Microsoft Networks 1.03.
- The Windows 2000-based client then passes the user's name and password (in clear text if the instructions from Q244627 have been used). However, PC Networks 1.0 is capable of supporting share-level security only, and cannot accept the username\password combination that is provided. Because of this the attempt to use the shared resource does not work. Microsoft Networks 1.03 is capable of user level security, and succeeds with Windows NT 4.0.
The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.
Keywords: kbnetwork kbprb KB296605
Technology: kbwin2000AdvServ kbwin2000AdvServSearch kbWin2000AdvServSP1 kbWin2000AdvServSP2 kbwin2000Pro kbwin2000ProSearch kbWin2000ProSP1 kbWin2000ProSP2 kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbwin2000ServSP1 kbwin2000ServSP2 kbWinAdvServSearch
