samba - Jun 2008 - smb signing is incompatible with share level security !

----------  Msg Reenviado  ----------

Subject: smb signing is incompatible with share level security !
Date: Tuesday 20 November 2007 16:55
From: Javier Ruiz <javier.ruiz@indufrial.com>
To: samba@lists.samba.org

These are some of the error messages found in the logs from smb:

Nov 20 16:09:32 dell01 smbd[5787]:   Denied connection from  (0.0.0.0)
Nov 20 16:09:32 dell01 smbd[5787]: [2007/11/20 16:09:32, 0]
lib/util_sock.c:get_peer_addr(1225)
Nov 20 16:09:32 dell01 smbd[5787]:   getpeername failed. Error was El otro
extremo de la conexi?n no est? conectado
Nov 20 16:09:32 dell01 smbd[5787]:   Connection denied from 0.0.0.0
Nov 20 16:09:32 dell01 smbd[5787]: [2007/11/20 16:09:32, 0]
lib/util_sock.c:write_data(557)
Nov 20 16:09:32 dell01 smbd[5787]:   write_data: write failure in writing to
client 193.0.0.59. Error Conexi?n reinicializada por la m?quina remota
Nov 20 16:09:32 dell01 smbd[5787]: [2007/11/20 16:09:32, 0]
lib/util_sock.c:send_smb(765)
Nov 20 16:09:32 dell01 smbd[5787]:   Error writing 5 bytes to client. -1.
(Conexi?n reinicializada por la m?quina remota)

Nov 20 16:24:37 dell01 smbd[6199]: [2007/11/20 16:24:37, 0]
smbd/negprot.c:reply_nt1(316)
Nov 20 16:24:37 dell01 smbd[6199]:   reply_nt1: smb signing is incompatible
with share level security !
Nov 20 16:24:37 dell01 smbd[6200]: [2007/11/20 16:24:37, 0]
smbd/negprot.c:reply_nt1(316)
Nov 20 16:24:37 dell01 smbd[6200]:   reply_nt1: smb signing is incompatible
with share level security !

Below some key facts:

S.O : SUSE LINUX 10.1 (i586) - Kernel 2.6.16.21-0.13-default (10).

content of smb.conf :

# Global parameters
[global]
*workgroup = mysystem
*netbios name = mypc
*server string = Servidor Deel
*interfaces = 1xx.0.0.xxx/24
security = share
username map = /etc/samba/smbusers
hosts allow = 1xx.0.0. 127.
#       printing = cups
printcap name = cups
add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody
-s /bin/false %m$
domain master = no
restrict anonymous = no
#preferred master = no
preferred master = Yes
max protocol = NT
ldap ssl = No
server signing = Auto
#local master = no
local master = Yes

[homes]
comment = Home Directories
read only = No
create mask = 0640
directory mask = 0750
browseable = No

[printers]
comment = All Printers
path = /var/tmp
create mask = 0700
guest ok = Yes
printable = Yes
#dirk
[compartido]
*comment = comentario
*path = /path1/path1/path1
*username = user1, user2
read only = No
create mask = 0777
directory mask = 0777

*For security reasons, some details have been changed....jejej


Thanks for your help !!!

--
javierPUNTOruizARROBAindufrialPUNTOcom
PostMaster
Cartagena-Colombia

-------------------------------------------------------

-- 
javierPUNTOruizARROBAindufrialPUNTOcom
PostMaster Indufrial S.A.
Cartagena-Colombia

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

I would guess the problem is exactly what it says, smb signing is 
incompatible with share level security. So either stop using share level 
security (my personal preference) or stop telling it to use smb signing.

Javier Ruiz wrote:
> <snip>
>
> Nov 20 16:24:37 dell01 smbd[6199]:   reply_nt1: smb signing is incompatible
> with share level security !
>
> <snip>
> security = share
> <snip>
> server signing = Auto
> <snip>
>   
*Michael Heydon - IT Administrator *
michaelh@jaswin.com.au <mailto:michaelh@jaswin.com.au>