SMB signing.

[Christopher R. Hertel]

Jeremy, I am very interested in this as well.  I don't have much of a
lab at present (my primary machine is having motherboard trouble), but
if I can help please let me know.  I want to document how this
(actually) works.

Chris -)-----

Jeremy Allison wrote:
> 
> Hi all,
> 
>         Is anyone using Windows SMB signing in a production
> environment ?
> This is the signing proceedure created by setting the Registry keys
> EnableSecuritySignature:1, RequireSecuritySignature: 1 in the
> lanmanserver and lanmanworkstation parameters.
> 
> I'm playing with implementing this in Samba for 3.0, but am finding
> that it doesn't seem to work when mixing Windows NT or Windows 2000
> clients with Windows XP servers. The clients get ACCESS_DENIED
> messages from the servers and the signing verification seems to fail.
> 
> Of course it doesn't match the published spec, but that's just to be
> expected I guess :-) :-).
> 
> I'd appreciate any data points from people actually running with this
> turned on.
> 
> Thanks,
> 
>         Jeremy Allison,
>         Samba Team.

-- 
Christopher R. Hertel -)-----                   University of Minnesota
crh at nts.umn.edu              Networking and Telecommunications Services