Hello,
context: Samba-3.0.2 on a i386 debian-sarge linux, 2.4 kernel.
All the windows machine on our network switched today to NTLMv2, and
mount.smbfs can't access anymore ressources which are available to
smbclient.
Exerpt from smb.conf:
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
The rest being default.
Doing
smbclient -L server -U user -W wg -d 3 2>&1 | more
results in
Connecting to x.x.x. at port 445
Password:
Doing spnego session setup (blob length=115)
got OID=1 2 840 48018 1 2 2
got OID=1 2 840 113554 1 2 2
got OID=1 2 840 113554 1 2 2 3
got OID=1 3 6 1 4 1 311 2 2 10
got principal=machine$@domain
Got challenge flags:
Got NTLMSSP neg_flags=0x60890215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
While
mount.smbfs service mountpoint -o workgroup=wg,username=user,debug=6
results in
mount.smbfs started (version 3.0.2-Debian)
added interface ip=x.x.x.x bcast=x.x.x.255 nmask=255.255.255.0
Opening cache file at /var/run/samba/gencache.tdb
Connecting to x.x.x.x at port 445
socket option SO_KEEPALIVE = 1
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option IPTOS_LOWDELAY = 16
socket option IPTOS_THROUGHPUT = 16
socket option SO_SNDBUF = 16384
socket option SO_RCVBUF = 16384
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
5220: session request ok
write_socket(6,183)
write_socket(6,183) wrote 183
size=101
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=5220
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]= 8 (0x8)
[...]
5220: session setup failed: ERRDOS - ERRnoaccess (Access denied.)
So, does mount.smbfs support NTLMv2 ? Is there some special
option/compile flag to use ?
TIA
Pascal Dupuis
P.S.: I am (no more) subscribed to this list, could you please CC
replies ?
--
Dr. ir. Pascal Dupuis
K. U. Leuven, ESAT/ELECTA (formerly ELEN): http://www.esat.kuleuven.ac.be/
Kasteelpark Arenberg, 10; B-3001 Leuven-Heverlee, Belgium
Tel. +32-16-32 10 21 -- Fax +32-16-32 19 85