We are having issue with the smb signing on Samba 3.2.3.  I understand that there was a bug on 3.2.0 and the status was fixed on 3.2.1. It seems to be the problem still there.

We have two domains (domain A and domain B).  Both domains are on a different forest. We have a one way external trust relationship between the two domains.  Domain B trusting Domain A.  The samba server 3.2.3 is a member of domain B, UserIDs and workstations (Windows XP) are member and are logging on domain A.  Workstations on domain “A” have the following digital signing policies enable.

Microsoft network client: Digitally sign communications (always) Security Setting: enable 
Microsoft network client: Digitally sign communications (if server agrees) Security Setting: enabled
Microsoft network server: Digitally sign communications (always) Security Setting: enable 
Microsoft network server: Digitally sign communications (if client agrees) Security Setting: enable


The problem is, even if the samba 3.2.3 server/client signing were set to “Yes, No and Auto”.  Accessing its share from domain A workstations were denied.  And then I get these client logs below.


[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 1
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:srv_sign_outgoing_message(708)
  srv_sign_outgoing_message: seq 1: sent SMB signature of
[2008/08/28 16:06:10, 10] lib/util.c:dump_data(2223)
  [000] 8A 2E D9 6B 17 D8 02 19                           ...k....
[2008/08/28 16:06:10, 10] lib/util_sock.c:read_smb_length_return_keepalive(1118)
  got smb length of 80
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 2
[2008/08/28 16:06:10,  0] libsmb/smb_signing.c:srv_check_incoming_message(754)
  srv_check_incoming_message: BAD SIG: seq 2 wanted SMB signature of
[2008/08/28 16:06:10,  5] lib/util.c:dump_data(2223)
  [000] 2E D4 47 83 26 B0 94 D6                           ..G.&...
[2008/08/28 16:06:10,  0] libsmb/smb_signing.c:srv_check_incoming_message(758)
  srv_check_incoming_message: BAD SIG: seq 2 got SMB signature of
[2008/08/28 16:06:10,  5] lib/util.c:dump_data(2223)
  [000] 8B 45 BE F4 8D 45 40 10                           .E...E@.
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967293
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967294
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967295
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 0
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 1
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 2
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 3
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 5
[2008/08/28 16:06:10, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 6
[2008/08/28 16:06:10,  5] libsmb/smb_signing.c:signing_good(243)
  srv_check_incoming_message: signing negotiated but not required and peer
  isn't sending correct signatures. Turning off.