Bug 5735 - Samba 3.2.3 smb signing
Samba 3.2.3 smb signing
Status: RESOLVED DUPLICATE of bug 5733
Product: Samba 3.2
Classification: Unclassified
Component: File services
unspecified
Sparc Windows XP
: P3 normal
: ---
Assigned To: Samba Bugzilla Account
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-09-03 15:44 UTC by Peng Diaz
Modified: 2008-09-04 05:20 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Peng Diaz 2008-09-03 15:44:45 UTC
We are having issue with the smb signing on Samba 3.2.3.  I understand that there was a bug on 3.2.0 and the status was fixed on 3.2.1. It seems to be the problem still there.

We have two domains (domain A and domain B).  Both domains are on a different forest. We have a one way external trust relationship between the two domains.  Domain B trusting Domain A.  The samba server 3.2.3 is a member of domain B, UserIDs and workstations (Windows XP) are member and are logging on domain A.  Workstations on domain “A” have the following digital signing policies enable.

Microsoft network client: Digitally sign communications (always) Security Setting: enable 
Microsoft network client: Digitally sign communications (if server agrees) Security Setting: enabled
Microsoft network server: Digitally sign communications (always) Security Setting: enable 
Microsoft network server: Digitally sign communications (if client agrees) Security Setting: enable


The problem is, even if the samba 3.2.3 server/client signing were set to “Yes, No and Auto”.  Accessing its share from domain A workstations were denied.  And then I get these client logs below.


[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 1
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:srv_sign_outgoing_message(708)
  srv_sign_outgoing_message: seq 1: sent SMB signature of
[2008/08/28 16:06:10, 10] lib/util.c:dump_data(2223)
  [000] 8A 2E D9 6B 17 D8 02 19                           ...k....
[2008/08/28 16:06:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1118)
  got smb length of 80
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 2
[2008/08/28 16:06:10,  0] libsmb/smb_signing.c:srv_check_incoming_message(754)
  srv_check_incoming_message: BAD SIG: seq 2 wanted SMB signature of
[2008/08/28 16:06:10,  5] lib/util.c:dump_data(2223)
  [000] 2E D4 47 83 26 B0 94 D6                           ..G.&...
[2008/08/28 16:06:10,  0] libsmb/smb_signing.c:srv_check_incoming_message(758)
  srv_check_incoming_message: BAD SIG: seq 2 got SMB signature of
[2008/08/28 16:06:10,  5] lib/util.c:dump_data(2223)
  [000] 8B 45 BE F4 8D 45 40 10                           .E...E@.
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967293
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967294
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967295
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 0
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 1
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 2
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 3
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 5
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 6
[2008/08/28 16:06:10,  5] libsmb/smb_signing.c:signing_good(243)
  srv_check_incoming_message: signing negotiated but not required and peer
  isn't sending correct signatures. Turning off.
Comment 1 Volker Lendecke 2008-09-04 05:20:36 UTC

*** This bug has been marked as a duplicate of 5733 ***