BAD SIG NTLM2

[Mihail Stefanov]

Just want to add some logs

Got NTLMSSP neg_flags=0x62088215
~                                       |1281     NTLMSSP_NEGOTIATE_UNICODE
~                                       |1282     NTLMSSP_REQUEST_TARGET
~                                       |1283     NTLMSSP_NEGOTIATE_SIGN
~                                       |1284     NTLMSSP_NEGOTIATE_NTLM
~                                       |1285     NTLMSSP_NEGOTIATE_ALWAYS_SIGN
~                                       |1286     NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
~                                       |1287     NTLMSSP_NEGOTIATE_VERSION
~                                       |1288     NTLMSSP_NEGOTIATE_128
~                                       |1289     NTLMSSP_NEGOTIATE_KEY_EXCH

So for me is strange how code goes here ->

if (ntlmssp_state->neg_flags & NTLMSSP_NEGOTIATE_NTLM2) {
|228         if (local_sig.length != sig->length ||
|229             memcmp(local_sig.data, sig->data, sig->length) != 0) {
|230             DEBUG(5, ("BAD SIG NTLM2: wanted signature of\n"));
|231             dump_data(5, local_sig.data, local_sig.length);
|232
|233             DEBUG(5, ("BAD SIG: got signature of\n"));
|234             dump_data(5, sig->data, sig->length);
|235
|236             DEBUG(0, ("NTLMSSP NTLM2 packet check failed due to invalid signature!\n"));
|237             talloc_free(tmp_ctx);
|238             return NT_STATUS_ACCESS_DENIED;
|239         }

> On Sep 29, 2016, at 3:06 PM, Mihail Stefanov <mihaillive at hotmail.com> wrote:
> 
> Hi,
> How I can get BAD SIG NTLM2 wanted signature of, BAD SIG: got signature of … in case 
> 
> 1. I am using smbclient
> 2. in smb.conf  I have 'client NTLMv2 auth = yes'
> 
> Thanks in advance
> M.