[Samba] Signing problems with macOS client and Linux Server

[Samuel Williams]

I have the following in my smb.conf

[global]
  # ...
  client signing = disabled
  client ipc signing = disabled
  server signing = disabled
  # ...

But no matter what, the macOS client always connects with signing.

On server:

# smbstatus --shares
Service      pid     Machine       Connected at
Encryption   Signing
---------------------------------------------------------------------------------------------
media        2858    2406:e000:4231:0:187d:78de:936e:499d Tue Jan 17
23:06:51 2017 NZDT    -            AES-128-CMAC

On client:

> smbutil statshares -a

==================================================================================================
SHARE                         ATTRIBUTE TYPE                VALUE
==================================================================================================
media
                              SERVER_NAME                   hinoki.local
                              USER_ID                       501
                              SMB_NEGOTIATE
SMBV_NEG_SMB1_ENABLED
                              SMB_NEGOTIATE
SMBV_NEG_SMB2_ENABLED
                              SMB_NEGOTIATE
SMBV_NEG_SMB3_ENABLED
                              SMB_VERSION                   SMB_3.02
                              SMB_SHARE_TYPE                DISK
                              SIGNING_SUPPORTED             TRUE
                              EXTENDED_SECURITY_SUPPORTED   TRUE
                              UNIX_SUPPORT                  TRUE
                              LARGE_FILE_SUPPORTED          TRUE
                              OS_X_SERVER                   TRUE
                              CLIENT_REQUIRES_SIGNING       TRUE
                              FILE_IDS_SUPPORTED            TRUE
                              DFS_SUPPORTED                 TRUE
                              FILE_LEASING_SUPPORTED        TRUE
                              MULTI_CREDIT_SUPPORTED        TRUE
                              ENCRYPTION_SUPPORTED          TRUE
                              SIGNING_ON                    TRUE

--------------------------------------------------------------------------------------------------

What am I doing wrong?

Thanks
Samuel