2012 server cannot access samba 3.6.6 (or 3.6.8)

[Stefan (metze) Metzmacher]

Hi Herb,

> There are 2 problems here. First we get the bad signature. I don't
> understand how the
> smb signing is done well enough to see why that is happening.
> 
> Second it appears we need to implement FSCTL_VALIDATE_NEGOTIATE_INFO. I
> tried to ignore
> the signing error and return NOT_IMPLEMENTED for this and the client
> does an immediate
> session logoff. The response we send was tagged as being signed so I
> don't know if that
> was the problem or just that it didn't like the NOT_IMPLEMENTED.
>
> Has anyone tested Windows8 or Server 2012 against samba and been able to
> map shares?

I works fine against 4.0/master.

FSCTL_VALIDATE_NEGOTIATE_INFO is not requiered,
we just need to return a signed response.

Can file a bug for your problem, with a level 10 log
and a network capture.

metze

> On 09/25/2012 07:27 AM, Herb Lewis wrote:
>> I get errors when I try to map a share from a samba server. I see the
>> following in the
>> logs from the 3.6.8 server. Any ideas where to look?
>>
>> [2012/09/25 14:17:25.356857, 10] smbd_smb2_request_dispatch:
>> opcode[SMB2_IOCTL] mid = 4
>> [2012/09/25 14:17:25.357477,  0] Bad SMB2 signature for message
>> [2012/09/25 14:17:25.358464,  0] [0000] C8 6B 2E 0F E7 54 AB 47 C5 B0
>> D0 13 33 F9 FF 60   .k...T.G ....3..`
>> [2012/09/25 14:17:25.359582,  0] [0000] 96 67 A3 56 DC 47 40 49 15 47
>> C7 16 A7 D6 5E 9F   .g.V.G at I .G....^.
>> [2012/09/25 14:17:25.360715, 10] smbd_smb2_request_error_ex: idx[1]
>> status[NT_STATUS_ACCESS_DENIED] || at
>> /.automount/nfs.panwest.panasas.com/root/sb4/hlewis/
>> hlewis-sb4-dev/src/samba/source3/smbd/smb2_server.c:1382
>> [2012/09/25 14:17:25.361829, 10] smbd_smb2_request_done_ex: idx[1]
>> status[NT_STATUS_ACCESS_DENIED] body[8] dyn[yes:1] at
>> /.automount/nfs.panwest.panasas.com/r
>> oot/sb4/hlewis/hlewis-sb4-dev/src/samba/source3/smbd/smb2_server.c:2110
>> [2012/09/25 14:17:25.362944, 10] smb2_set_operation_credit: requested
>> 1, granted 1, current possible/max 482/512, total
>> granted/max/low/range 31/8192/5/31
>> [2012/09/25 14:17:25.364092,  5] signed SMB2 message
>>   smbd_smb2_request_reply: sending...
>>         req->in.vector[0].iov_len = 4
>>         req->in.vector[1].iov_len = 64
>>         req->in.vector[2].iov_len = 56
>>         req->in.vector[3].iov_len = 32
>>         req->out.vector[0].iov_len = 4
>>         req->out.vector[1].iov_len = 64
>>         req->out.vector[2].iov_len = 8
>>         req->out.vector[3].iov_len = 1
>>
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120927/9c572c55/attachment.pgp>