In the course of debugging my still-unsolved "smbclient tar starts throwing SMB signature errors after 750MB of data or so" error, I came across this apparent inconsistency...>From the smb.conf man page:"client use spnego (G) This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism. SPNEGO client support for SMB Signing is currently broken, so you might want to turn this option off when operating with Windows 2003 domain controllers in particular.">From the Official Samba-3 HOWTO (Section 6.6.3, page 80):"Windows 2003 requires SMB signing. Client-side SMB signing has been implemented in Samba 3.0. Set client use spnego = yes when communicating with a Windows 2003 server." Coincidentally, I've tried my problem with it set both ways, and it still fails. Is it thus safe to assume that the "client use spnego" setting has no relation to the signing that's going on in relation to the "Server packet had invalid SMB signature!" errors I'm getting? Thanks, Fran -- Fran Fabrizio Senior Systems Analyst Department of Computer and Information Sciences University of Alabama - Birmingham fran@cis.uab.edu (205) 934-0653
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 15 Jan 2004, Fran Fabrizio wrote:> > In the course of debugging my still-unsolved "smbclient tar starts > throwing SMB signature errors after 750MB of data or so" error, I came > across this apparent inconsistency... > > >From the smb.conf man page: > > "client use spnego (G) > > This variable controls controls whether samba clients will try to use > Simple and Protected NEGOciation (as specified by rfc2478) with > WindowsXP and Windows2000 servers to agree upon an authentication > mechanism. SPNEGO client support for SMB Signing is currently broken, so > you might want to turn this option off when operating with Windows 2003 > domain controllers in particular."This is old. I'll make sure the man page gets updated. Thanks. cheers, jerry ---------------------------------------------------------------------- Hewlett-Packard ------------------------- http://www.hp.com SAMBA Team ---------------------- http://www.samba.org GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQFABvtWIR7qMdg1EfYRAmnOAKDRMJPCFdhsE4Vh56C64zfJRm/OIwCfRrdw A/sN1LEt2YuwXj+RiEcTRs4=LLju -----END PGP SIGNATURE-----