Intermittant SMB packet signing with NTLM errors

Gerald Carter jerry at
Mon Feb 1 13:58:42 MST 2010

Dave Daugherty wrote:

> The network trace shows the NTLM authentication succeeding and sending
> back the SessionSetupAndX response signed (which the client seems happy
> with)
> The next exchange is a TreeConnect which is signed by the client.  Samba
> cannot work out the signature so it disables signing, sending a
> 0000000000000000 signature back to the client in the TreeConnect
> response.  The client does not like this and breaks the connection.


FWIW...clients generally ignore the signature on the session setup
response so that doesn't really tell you anything.

cheers, jerry
"What man is a man who does not make the world better?"      --Balian

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the samba-technical mailing list