Intermittant SMB packet signing with NTLM errors

[Jeremy Allison]

On Mon, Feb 01, 2010 at 12:25:10PM -0800, Dave Daugherty wrote:
> Windows XP and Windows Vista
> 
>  
> 
> Samba 3.3.9 with Centrify modifications (nothing near the low level
> packet signing code though).
> 
>  
> 
> We have a customer where sometimes SMB packet signing using NTLM fails,
> but sometimes it succeeds.
> 
>  
> 
> The network trace shows the NTLM authentication succeeding and sending
> back the SessionSetupAndX response signed (which the client seems happy
> with)
> 
>  
> 
> The next exchange is a TreeConnect which is signed by the client.  Samba
> cannot work out the signature so it disables signing, sending a
> 0000000000000000 signature back to the client in the TreeConnect
> response.  The client does not like this and breaks the connection.
> 
>  
> 
> The customer was using 3.0.33 (with Centrify modifications) where there
> was no reported problem.

Dave, what does a debug level 10 log say ? That'll try -5 - +5 around the
signing sequence number so we can see if it gets out of sync.

Jeremy.