samba-users August 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: [Samba] SAMBA and SMB Signing

[Samba] SAMBA and SMB Signing

From: Kartchner, Val Civ USAF AFMC 519 SMXS/MXDEA <Val.Kartchner_at_nospam>
Date: Thu Aug 05 2010 - 23:42:49 GMT
To: <samba@lists.samba.org>

Hello,

We're working on setting up a SAMBA server, but it is not working.
There is a standard configuration for our Windows Vista machines. With
the previous configuration of Windows Vista ("Alice") it connects to the
SAMBA fine. However, the latest Windows Vista configuration ("Bob")
will contact the SAMBA server, send the required password then just stop
communicating.

We have been sniffing the packets between various configurations and
found two differences in the last message from client to server:
"Canonicalized path names" and "Security Signature" bits are both set on
Bob but unset on Alice. We have confirmed that the "Security Signature"
bit is the problem by using the instructions on page 5 of
"http://www.expand.com/industries/case-studies/2008/bosc/white%20papers/
WP_SMBsigning.pdf" to turn off SMB signing. Bob will then work with the
SAMBA server. However, turning this off on an actual Windows Vista
system is NOT an allowed option for us. I have found requests on some
mailing lists asking how to enable SMB signing in SAMBA, but no replies
telling how to do it. I have also searched for SAMBA configuration
options but have not found any way to enable it.

How is SMB signing enabled in SAMBA?

Thanks,

Val Kartchner
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba