[Samba] [Samba-it] samba 4.x: centos 7: Bad SMB2 signature for message

[L.P.H. van Belle]

No didnt mis that. 
When i see : 
> >> 	realm = s-backup.studio.it
> >> 	server string = Samba Server Version %v
> >> 	security = DOMAIN

Then Im thinking this is a samba 3.6x connected to an AD, 
but i can be wrong but NT4 does not use realm. 

;-) 



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny
> Verzonden: donderdag 22 oktober 2015 11:42
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] [Samba-it] samba 4.x: centos 7: Bad SMB2 signature
> for message
> 
> On 22/10/15 10:17, L.P.H. van Belle wrote:
> > Try again and add :
> >
> >      winbind refresh tickets = yes
> >      winbind offline logon = yes
> >
> > if that does not work, i really suggest you upgrade to samba 4.2+
> > or set the pc's to use a "lower" SMB prototol.
> >
> > Greetz,
> >
> > Louis
> >
> >
> >> -----Oorspronkelijk bericht-----
> >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Dario Lesca
> >> Verzonden: donderdag 22 oktober 2015 11:03
> >> Aan: samba at lists.samba.org
> >> Onderwerp: Re: [Samba] [Samba-it] samba 4.x: centos 7: Bad SMB2
> signature
> >> for message
> >>
> >> Il giorno ven, 25/09/2015 alle 11.39 +0200, Dario Lesca ha scritto:
> >>
> >>> Yesterday, after some day the problem It reappeared
> >>>
> >>> Now I try "server signing = mandatory", wait some day and let you
> >>> know.
> >> The problem still alive.
> >>
> >> Today Win8* cannot access to server, into log I see this message:
> >>
> >>> Oct 22 09:27:11 s-backup smbd[32645]: STATUS=daemon 'smbd' finished
> >> starting up and ready to serve connectionssmb_signing_good: BAD SIG:
> seq 2
> >>> Oct 22 09:27:11 s-backup smbd[32645]: [2015/10/22 09:27:11.575613,  0]
> >> ../source3/smbd/process.c:505(receive_smb_talloc)
> >>> Oct 22 09:27:11 s-backup smbd[32645]: receive_smb: SMB Signature
> >> verification failed on incoming packet!
> >>
> >> seem a winbind problem, if I restart it, all work fine
> >>
> >> Someone have some other suggest?
> >>
> >> This is my smb.conf:
> >>
> >> Load smb config files from /etc/samba/smb.conf
> >> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
> (16384)
> >> Processing section "[homes]"
> >> Processing section "[backup]"
> >> Loaded services file OK.
> >> Server role: ROLE_DOMAIN_MEMBER
> >> [global]
> >> 	workgroup = STUDIO
> >> 	realm = s-backup.studio.it
> >> 	server string = Samba Server Version %v
> >> 	security = DOMAIN
> >> 	passdb backend = tdbsam:/etc/samba/account.tdb
> >> 	log file = /var/log/samba/log.%m
> >> 	max log size = 50
> >> 	server signing = required
> >> 	load printers = No
> >> 	printcap name = /dev/null
> >> 	local master = No
> >> 	domain master = No
> >> 	wins server = 192.168.50.1
> >> 	winbind enum users = Yes
> >> 	winbind enum groups = Yes
> >> 	winbind use default domain = Yes
> >> 	idmap config * : range = 1000000-9999999
> >> 	idmap config * : backend = rid
> >> 	printing = bsd
> >> 	cups options = raw
> >> 	print command = lpr -r -P'%p' %s
> >> 	lpq command = lpq -P'%p'
> >> 	lprm command = lprm -P'%p' %j
> >> 	store dos attributes = Yes
> >>
> >> [homes]
> >> 	comment = Home Directories
> >> 	read only = No
> >> 	browseable = No
> >>
> >> [backup]
> >> 	comment = Cartella con Backup
> >> 	path = /backup2t/rsnapshot
> >> 	valid users = @STUDIO\grpbackup
> >> 	force user = root
> >> 	force group = root
> >> 	guest ok = Yes
> >>
> >> Many thanks
> >>
> >> --
> >> Dario Lesca
> >> (inviato dal mio Linux Fedora 22 con Gnome 3.16)
> >>
> >>
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >
> >
> 
> Louis, I think you missed that the OP is running an NT4-style PDC. :-)
> 
> I totally agree that he should be making plans to upgrade to AD though,
> microsoft could turn off support for NT4 at any time, and very probably
> will.
> 
> Rowland
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba