[jcifs] RE: LMv2 signing fix

Michael B Allen mba2000 at ioplex.com
Tue Oct 7 12:20:53 EST 2003


Eric,

You cited Chris's documentation that signing does not occur with GUEST
credentials. However, if signing is negotiated the GUEST login
SMB_COM_SESSION_SETUP_ANX/SMB_COM_TREE_CONNECT_ANDX response is signed and
subsequent operations fail. It looks like the server want's signing. If
signing *is* used for GUEST signature verification, the initial
SMB_COM_SESSION_SETUP_ANX/SMB_COM_TREE_CONNECT_ANDX response fails
verification, trows into using the LMV2_CROSSDOMAIN_KEY and fails with
that too.

Have you ever seen GUEST work in a domain environment? Unfortunately I do
not have access to a machine in another domain that will negotiate signing
(or credentials from another domain) to test the failover to
LMV2_CROSSDOMAIN_KEY.

Mike

-- 
A program should be written to  model the concepts of the task it
performs rather than the physical world or a process because this
maximizes the  potential for it  to be applied  to tasks that are
conceptually similar and, more  important, to tasks that have not
yet been conceived.






More information about the jcifs mailing list