SMB signing problem

[Diego Woitasen]

Hi,
 I've been using SASL NTLM auth with Cyrus IMAP and Postfix for months
without any problem. The servers was Windows 2000 until the last weekend
because our customer upgraded to 2003. After that, NTLM stopped working. The
error in imapd.log is "NTLM: error in NEGPROT response parameters".

I think that this problem is related to "Default Domain Controller policy
has Server Message Buffering (SMB) signing". There is a report about this on
Mc Afee Product Knowledge Base with the same error. This reports says that
you should disable that policy in the Windows server but our client doesn't
like that.

Is there a way to fix or to work around this? I read the Cyrus SASL code
 but I don't see any option involved near the error message.

Regards,
 Diego


-- 
Diego Woitasen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/cyrus-sasl/attachments/20110519/95fc9d85/attachment.html