[Samba] Signing: partial(AES-128-CMAC)

[cYuSeDfZfb cYuSeDfZfb]

Hi,

Noticed in my smbstatus output:

Samba version 4.17.5
PID     Username     Group        Machine
     Protocol Version  Encryption           Signing
----------------------------------------------------------------------------------------------------------------------------------------
2691    galera3      galera3      192.168.78.119
(ipv4:192.168.78.119:49536) SMB3_11           AES-128-GCM
partial(AES-128-CMAC)

Service      pid     Machine       Connected at
Encryption   Signing
---------------------------------------------------------------------------------------------
IPC$         2691    192.168.78.119 Thu May 11 11:41:39 AM 2023 CEST
AES-128-GCM  AES-128-CMAC
galera3      2691    192.168.78.119 Thu May 11 11:41:39 AM 2023 CEST
AES-128-GCM  AES-128-CMAC


This is samba 4.17.5, and a pretty basic (security=user) smb.conf with
just basics and only these security additions:

    client signing = mandatory
    server signing = mandatory
    smb encrypt = mandatory

Why is Signing only "partial"? Anything I can do to improve that?

Thanks!