[Samba] client use spnego

Fran Fabrizio fran at cis.uab.edu
Thu Jan 15 15:21:51 GMT 2004

In the course of debugging my still-unsolved "smbclient tar starts
throwing SMB signature errors after 750MB of data or so" error, I came
across this apparent inconsistency...

>From the smb.conf man page:

"client use spnego (G)

This variable controls controls whether samba clients will try to use
Simple and Protected NEGOciation (as specified by rfc2478) with
WindowsXP and Windows2000 servers to agree upon an authentication
mechanism. SPNEGO client support for SMB Signing is currently broken, so
you might want to turn this option off when operating with Windows 2003
domain controllers in particular."

>From the Official Samba-3 HOWTO (Section 6.6.3, page 80):

"Windows 2003 requires SMB signing.  Client-side SMB signing has been
implemented in Samba 3.0.  Set client use spnego = yes when
communicating with a Windows 2003 server."   

Coincidentally, I've tried my problem with it set both ways, and it
still fails.  Is it thus safe to assume that the "client use spnego"
setting has no relation to the signing that's going on in relation to
the "Server packet had invalid SMB signature!" errors I'm getting?



Fran Fabrizio
Senior Systems Analyst
Department of Computer and Information Sciences
University of Alabama - Birmingham
fran at cis.uab.edu
(205) 934-0653

More information about the samba mailing list