[cifs-protocol] [MS-SMB2] Selective Signing of ioctl FSCTL_QUERY_NETWORK_INTERFACE_INFO requests - TrackingID#2406060040007612

[Jones Syue 薛懷宗]

> I have finished my investigation on this. Windows will always sign the 
> IOCTL FSCTL_QUERY_NETWORK_INTERFACE_INFO request.
> Another request that is always signed is tree connect.
> 
> I have filed a bug to fix this issue in the documentation.
> 
> Please let me know if this does not answer your question.

Thank you Obaid and Kristian for your investigations. 
This looks good to me :)

--

Regards,
Jones Syue | 薛懷宗
QNAP Systems, Inc.

________________________________________
From: Obaid F <support at mail.support.microsoft.com>
Sent: Saturday, June 15, 2024 7:13 AM
To: Jones Syue 薛懷宗 <jonessyue at qnap.com>; cifs-protocol at lists.samba.org <cifs-protocol at lists.samba.org>
Cc: supportmail at microsoft.com <supportmail at microsoft.com>; Obaid Farooqi <obaidf at microsoft.com>
Subject: RE: [MS-SMB2] Selective Signing of ioctl FSCTL_... - TrackingID#2406060040007612
 

Hi Jones,
I have finished my investigation on this. Windows will always sign the IOCTL FSCTL_QUERY_NETWORK_INTERFACE_INFO request.
Another request that is always signed is tree connect.
 
I have filed a bug to fix this issue in the documentation.
 
Please let me know if this does not answer your question.
 
Regards,
Obaid Farooqi
Escalation Engineer | Microsoft
------------------- Original Message -------------------
From: Kristian.Smith at microsoft.com;
Received: Tue Jun 11 2024 18:55:59 GMT-0500 (Central Daylight Time)
To: jonessyue at qnap.com; cifs-protocol at lists.samba.org;
Cc: supportmail at microsoft.com;
Subject: RE: [MS-SMB2] Selective Signing of ioctl FSCTL_... - TrackingID#2406060040007612

Hi Jones,

I've been looking into the concerns that you outlined in your last email and it does appear that there is an inconsistency in the way the client signs most other requests. I was able to repro a trace where many SMB 3.x requests are unsigned (including FSCTL_DFS_GET_REFERRALS as you've shown). I am conducting some debugging to determine where these decisions are occurring in the code. Once I've come to a conclusion, I'll reach out with my findings.

Thanks for your patience.

Regards,
Kristian Smith
Support Escalation Engineer | Microsoft® Corporation
Office phone: +1 425-421-4442
Email: kristian.smith at microsoft.com