Print Email PDF

Resolve failing SMB Client Connections with NTLM Authentication

In Qumulo Core 2.6.0 (and higher), for clients that run Windows 7 (or higher), using an IP address to access a share on a Qumulo cluster requires the use of NTLM authentication. If a Windows client cannot connect with an IP address but can mount the share via the UNC path, the LmCompatibiltyLevel needs to be adjusted to NTLMv2. Once the change to NTLM authentication in the Windows registry is complete, client can successfully connect to a cluster using the NTLM authentication mechanism and an IP address. Before changing the NTLM Authentication level, confirm the issue first using the steps provided.

IMPORTANT: Before proceeding to change the level of NTLM Authentication, confirm the issue is not related to SMB signatures using the "System error 2148073478," "extended error," or "Invalid Signature" error message on SMB connections in Windows Server 2012 or Windows 8 article provided by Microsoft.

Confirm the Issue

  • Attempt to mount SMB shares via the IP on your Windows client
  • Verify that the returned error in the Windows UI is ambiguous and doesn’t specify an error code after a connection attempt

confusing_error.png

  • Run the following command:
net use * \\cluster\share /user:username
  • System Error 2148073478 has occurred is confirmation that the issue is related to NTLM Authentication in Windows

system_error.png

NOTE: Qumulo does not support LM or NTLMv1. Some environments and Windows clients are configured to run NTLMv1 which can be verified by running the net use command above.

Adjust NTLM Authentication Level

  • Open regedit and Run as administrator

run_as_admin.png

  • Authenticate as Administrator

admin_login.png

  • Navigate to the following path: 

\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

regedit.png

  • Double click LmCompatibiltyLevel to edit
  • Change the value to 5

edit_dword.png

  • Restart client computer for changes to take effect
  • Verify the issue is resolved by attempting to mount SMB shares via the IP on your Windows client
Was this article helpful?
2 out of 2 found this helpful

Comments

0 comments

Please sign in to leave a comment.

Have more questions?
Open a Case
Share it, if you like it.