> smbnegotiate: 'NT LM 0.12' > smbnegotiate: couldn't get mschap challenge > reply: error 2/1
Re: aquarela I don't use aquarela these days, but I think the problem is to do with aquarela being unable to contact keyfs. aquarela must be started on your server after keyfs, I run it on my work terminal/fs/auth/cpu all-in-one server and it is envoked in /cfg/$sysname/termrc after keyfs (starting keyfs and aquarela in termrc is very unusual but as I said I have an all in one box). check how it is started. RE cifs BTW, I am interested if you have problems with cifs. I know there a bug in the default ntlmv2 auth when working with Vista (and probably windows 7 too), but if you fall back to less secure auth on the wire (e.g. by adding -a ntlm to the cifs command line) then it works. Windows auth is a mess, and kerberos with asn.1 is ugly. -Steve