[jcifs] RE: LMv2 signing fix
Michael B Allen
mba2000 at ioplex.com
Tue Oct 7 12:20:53 EST 2003
Eric,
You cited Chris's documentation that signing does not occur with GUEST
credentials. However, if signing is negotiated the GUEST login
SMB_COM_SESSION_SETUP_ANX/SMB_COM_TREE_CONNECT_ANDX response is signed and
subsequent operations fail. It looks like the server want's signing. If
signing *is* used for GUEST signature verification, the initial
SMB_COM_SESSION_SETUP_ANX/SMB_COM_TREE_CONNECT_ANDX response fails
verification, trows into using the LMV2_CROSSDOMAIN_KEY and fails with
that too.
Have you ever seen GUEST work in a domain environment? Unfortunately I do
not have access to a machine in another domain that will negotiate signing
(or credentials from another domain) to test the failover to
LMV2_CROSSDOMAIN_KEY.
Mike
--
A program should be written to model the concepts of the task it
performs rather than the physical world or a process because this
maximizes the potential for it to be applied to tasks that are
conceptually similar and, more important, to tasks that have not
yet been conceived.
More information about the jcifs
mailing list