[Samba] [Samba-it] samba 4.x: centos 7: Bad SMB2 signature for message

[Rowland Penny]

On 22/10/15 10:17, L.P.H. van Belle wrote:
> Try again and add :
>
>      winbind refresh tickets = yes
>      winbind offline logon = yes
>
> if that does not work, i really suggest you upgrade to samba 4.2+
> or set the pc's to use a "lower" SMB prototol.
>
> Greetz,
>
> Louis
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Dario Lesca
>> Verzonden: donderdag 22 oktober 2015 11:03
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] [Samba-it] samba 4.x: centos 7: Bad SMB2 signature
>> for message
>>
>> Il giorno ven, 25/09/2015 alle 11.39 +0200, Dario Lesca ha scritto:
>>
>>> Yesterday, after some day the problem It reappeared
>>>
>>> Now I try "server signing = mandatory", wait some day and let you
>>> know.
>> The problem still alive.
>>
>> Today Win8* cannot access to server, into log I see this message:
>>
>>> Oct 22 09:27:11 s-backup smbd[32645]: STATUS=daemon 'smbd' finished
>> starting up and ready to serve connectionssmb_signing_good: BAD SIG: seq 2
>>> Oct 22 09:27:11 s-backup smbd[32645]: [2015/10/22 09:27:11.575613,  0]
>> ../source3/smbd/process.c:505(receive_smb_talloc)
>>> Oct 22 09:27:11 s-backup smbd[32645]: receive_smb: SMB Signature
>> verification failed on incoming packet!
>>
>> seem a winbind problem, if I restart it, all work fine
>>
>> Someone have some other suggest?
>>
>> This is my smb.conf:
>>
>> Load smb config files from /etc/samba/smb.conf
>> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
>> Processing section "[homes]"
>> Processing section "[backup]"
>> Loaded services file OK.
>> Server role: ROLE_DOMAIN_MEMBER
>> [global]
>> 	workgroup = STUDIO
>> 	realm = s-backup.studio.it
>> 	server string = Samba Server Version %v
>> 	security = DOMAIN
>> 	passdb backend = tdbsam:/etc/samba/account.tdb
>> 	log file = /var/log/samba/log.%m
>> 	max log size = 50
>> 	server signing = required
>> 	load printers = No
>> 	printcap name = /dev/null
>> 	local master = No
>> 	domain master = No
>> 	wins server = 192.168.50.1
>> 	winbind enum users = Yes
>> 	winbind enum groups = Yes
>> 	winbind use default domain = Yes
>> 	idmap config * : range = 1000000-9999999
>> 	idmap config * : backend = rid
>> 	printing = bsd
>> 	cups options = raw
>> 	print command = lpr -r -P'%p' %s
>> 	lpq command = lpq -P'%p'
>> 	lprm command = lprm -P'%p' %j
>> 	store dos attributes = Yes
>>
>> [homes]
>> 	comment = Home Directories
>> 	read only = No
>> 	browseable = No
>>
>> [backup]
>> 	comment = Cartella con Backup
>> 	path = /backup2t/rsnapshot
>> 	valid users = @STUDIO\grpbackup
>> 	force user = root
>> 	force group = root
>> 	guest ok = Yes
>>
>> Many thanks
>>
>> --
>> Dario Lesca
>> (inviato dal mio Linux Fedora 22 con Gnome 3.16)
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>
>

Louis, I think you missed that the OP is running an NT4-style PDC. :-)

I totally agree that he should be making plans to upgrade to AD though, 
microsoft could turn off support for NT4 at any time, and very probably 
will.

Rowland