The Samba-Bugzilla – Bug 1571
LANMAN2 protocol (and lower) broken in samba-3.x
Last modified: 2005-08-24 10:18:34 UTC
BTW - changed from samba-2.x (SUSE 8.1) to samba-3.0.5 (SUSE 9.1)
From now on *any* connection to our (ancient) OS/2 Warpserver failed:
"session setup failed: ERRDOS - ERRnoaccess (Access denied.)"
It seems, that *all* LANMAN2 depending implementations are *broken*..
To easily reproduce this error on a LINUX-machine - no need for a network
connection - use (add) the following entries in smb.conf:
interfaces = 127.0.0.1 eth0
security = user
protocol = LANMAN2 #!!!!
max protocol = LANMAN2 #!!!!
encrypt passwords = yes #(= no, not evaluated now...)
The following local executed command will fail:
smbclient //my_linux_machine/my_share -U my_user_id%my_password
This happens due to a *serious* error in
p = smb_buf(cli->outbuf);
memcpy(p,lm_response.data,lm_response.length; // copy (encrypted) pw
p += passlen; !!!!! WHY !!!
Should/Must be replaced with:
p += lm_response.length; !!!!!!!!!!!!
In the current implementation the stored 24 bytes of (encrypted) data is
partially *overwritten* by the later following data - which leads to an ERROR.
I have currently *not* checked "the whole samba-source" for similar problems...
I have checked-out the latest samba-source - compiled it - the
error *is gone*!!!
If any support/testing of "older smb-protocols" could be done - please let me
Entwicklungsbuero fuer Informationstechnologien
Sorry - if it was misleading...
The original source has currently not been fixed.
Download the latest source
*Change the source* and compile/install it
Fixed in SVN.
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.