[Samba] Negotiate NTLM Version with smblient 4.7.5 and Windows 2016 Server fails

Tompkins, Michael Michael.Tompkins at xerox.com
Mon Dec 16 17:39:52 UTC 2019

We are trying to connect to a Windows 2016 Samba server and are getting denied running samba-4.7.5 smbclient. I believe what is happening is we do a NTLMSSP_NEGOTIATE packet and it returns:

Version 10.0 (Build 14393); NTLM Current Revision 15
    Major Version: 10
    Minor Version: 0
    Build Number: 14393
    NTLM Current Revision: 15

Then we send a Session Setup Request with:
                                .... ..1. .... .... .... .... .... .... = Negotiate Version: Set

                            Version 6.1 (Build 0); NTLM Current Revision 15
                                Major Version: 6
                                Minor Version: 1
                                Build Number: 0
                                NTLM Current Revision: 15
                            MIC: d7cd676d79c0d0124209d8787ec97ef7
                        mechListMIC: 01000000a93bb7dfb796bf2400000000

We are getting a STATUS_ACCESS_DENIED message. Is this because the server is saying it support Version 10, and we are trying to talk Version 6.1 ? Is the min version something that can be set on the server side, or can we prevent this from being sent from the smbclient ? We have an early version of 4.1 that does not send the NTLM version in the Session Setup Request

                                .... ..0. .... .... .... .... .... .... = Negotiate Version: Not set

and it works to the same server.

I've searched the internet and I cannot find anything on this issue. Any assistance would be greatly appreciated.

Mike Tompkins

More information about the samba mailing list